why would you need to understand the entire SAML spec? Are you implementing a custom idp system?

Assuming you are using a well established authentication provider that has built in support for SAML? In that case it's simply a matter of configuration....