The identity provider (abbreviated IdP ) is a system entity that creates, maintains, and manages identity information for principals while providing authentication services to rely on party applications in federations or distributed networks.
The identity provider offers user authentication as a service. Rely on party apps, such as web apps, outsource user authentication steps to trusted identity providers. Like the relying party app is said to be federation , that is, it consumes the federation's identity.
The identity provider is a "trusted provider that allows you to use a single sign-on (SSO) system to access other websites." SSO improves usability by reducing password fatigue. It also provides better security by reducing the surface of potential attacks.
Video Identity provider
Type of identity provider
SAML identity provider
Security Assertion Markup Language (SAML) is a set of profiles for exchanging authentication and authorization data across security domains. In the SAML domain model, the identity provider is a special type of authentication authority. Specifically, the SAML identity provider is the system entity that issues the authentication statement along with the SAML SSO profile. Parties that rely on these authentication claims are called SAML service providers.
OpenID Provider
OpenID Connect (OIDC) is the identity layer above OAuth. In the domain model associated with OIDC, the identity provider is a special type of OAuthà authorization server, 2.0. Specifically, system entities called OpenID Providers issue a JSON-formatted identity token to OIDC that relies on parties via the RIGHT HTTP API.
Maps Identity provider
Example IdPs
- SecureAuth Identity: On-Prem and Cloud Based IDP (and SP) for Enterprise, Adaptive Authentication
- Ping Identity: On-Prem and Cloud Based IDP (and SP) for Enterprise, OIDC/SAML/OAuth
- Hotel officer: Open source, provides authentication without email-based OIDC password
- Keycloak: Open source, OIDC/SAML Java-based IdP
- Auth0: Commercial OIDC Id
- Gluu: Commercial OIDC/SAML Idol
- miniOrange: On-Premise and Cloud Based IDP (and SAML SP) for Company, SAML/OAuth
See also
- Combined identity
- Identity management
- Identity management system
- the SAML identity provider
References
Source of the article : Wikipedia
0 Comments