Below you will find information about the SAML2 implementation. A short description of what is involved is described here. Put simply:
- Identity Provider: An identity provider, or
idp
, is ESA's authoritative service for performing authentication on behalf of other services (it enables the SSO function). - Service Provider: A service provider, or
sp
, is any service that wants to be involved in the federated identity network. It performs a service for users, like offering a portal to manage Activites on.
In SAML2, both identity provider and service-provider need to configure themselves to know about one another
idp.xml
: An XML file that describes the identity provider service. It's usually available at a public URL for services to read.sp.xml
: In this case,sp.xml
refers to our service provider. This document must be given to theidp
so that they can authorize your service to use their identity provider. It can be given by email, but is often also hos