Federation

Federation

In many organizations, identity information is handled by an identity provider (IdP). Identity providers manage the life cycle of digital identities from creation through maintenance to eventual retirement of the identity in the systems and services it supports. Identity providers are often part of federated identity deployments, where they are paired with relying parties, which trust the identity provider to handle authentication and then rely on that authentication to grant access to services

The principle

typically a user

Identity providers (IdPs)

who provide identity and authentication services via an attestation process in which the IdP validates that the user is who they claim to be

Service providers (SPs)

who provide services to users whose identities have been attested to by an identity provider and then perform the requested function