SSO Glossary

ACS URL

Assertion Consumer Service URL. Endpoint where service provider receives assertion.

HTTPS

Hypertext Transfer Protocol over SSL (Secure Socket Layer). It's a TCP/IP protocol used by Web servers to transfer and display Web content securely. The data transferred is encrypted so that it can't be read by anyone except the recipient.

IDP

Identify Provider - The application that takes authentication information (commonly a username and password) and translates that into identity information (name, email, etc.) which it provides to Service Providers based on defined policies.

IDP Destination URL

Federation Server URL provided by IDP for Service Provider (SP) initiated requests.

PKI Certificate

Public Key Infrastructure (PKI) governs the issuance of digital certificates to protect sensitive data, provide unique digital identities for users, devices, and applications and secure end-to-end communications.

SAML

Security Assertion Markup Language (SAML) is an XML-based solution for exchanging user security information between an enterprise and a service provider.

SP

Service Provider (SAP Fieldglass) - An application that provides service to the end user. The software that provides some access control and communicates with the IDP for identity information.

SSO

Single Sign-On - A process whereby credentials are entered only once and allow access to separate systems without having to reauthenticate for the duration of the session.