Identity Provider

Identity Federation

Establishing trust between identity systems so a user authenticated in one can access another without a separate account, the mechanism an IAM engineer builds, via standards like SAML and OIDC, to enable single sign-on across organizations and clouds.

Authorization Code Flow

The standard OAuth 2.0 and OpenID Connect flow for web and mobile apps, where the app receives a short-lived authorization code and exchanges it server-side for tokens. It keeps tokens off the browser front channel, making it the recommended secure flow.

Federated Identity

An arrangement where one system trusts another to authenticate users, so a person can use a single identity across multiple applications or organizations without separate accounts, enabling single sign-on via standards like SAML and OIDC.

ID Token

In OpenID Connect, a token the identity provider issues to prove a user's identity to an application, containing claims about who the user is and how they authenticated. It is how a relying party learns the user is authenticated.

Workload IdentityStart here

An identity assigned to software or infrastructure so it can access resources without static secrets.

Single Sign-On

A sign-in model where one identity provider grants access to multiple applications.

SSO Implementation

Consent

SAML

Service Providers