# SAML 2.0
<a name="use-web-browser-start-streaming-session-SAML"></a>

 Users enter the URL that you provide for them to access your internal organizational portal. After they enter their organizational credentials, they're redirected to WorkSpaces Applications.

For more information, see [Setting Up SAML](external-identity-providers-setting-up-saml.md).

**Note**  
If your organization requires a smart card for Windows sign in to Active Directory-joined streaming instances and in-session authentication for streaming applications, your users must install and use the WorkSpaces Applications client. For more information, see [Smart Cards](feature-support-USB-devices-qualified.md#feature-support-USB-devices-qualified-smart-cards).