Question

DP (Identity Provider) vs SP (Service Provider) initiated sign-on flows: a) IDP-initiated begins with authentication, while SP-initiated begins with authorization. b) IDP-initiated begins with authorization, while SP-initiated begins with authentication. c) Both IDP-initiated and SP-initiated flows start with authentication. d) Both IDP-initiated and SP-initiated flows start with authorization.

Answer 1

The IDP-initiated sign-on flow begins with authorization, while the SP-initiated sign-on flow begins with authentication.

Step-by-step explanation:

The correct answer is b) IDP-initiated begins with authorization, while SP-initiated begins with authentication.

IDP-initiated sign-on flows start with authorization because the Identity Provider (IDP) verifies the user's identity and grants authorization to access the Service Provider (SP) resources. This flow is common in single sign-on (SSO) scenarios, where the IDP manages the authentication process for multiple applications.

On the other hand, SP-initiated sign-on flows start with authentication because the user initiates the process by accessing the SP's application. The SP then redirects the user to the IDP for authentication. Once authenticated, the IDP sends an assertion or token to the SP, granting authorization to access its resources.

Learn more about Identity Provider vs Service Provider