Donna Moore's company has a contract to sell office supplies to an office complex of a local company, ITelo. Employees of the local company can access a product catalog and order from ITelo's corporate portal. Donna does not want to maintain user data for all of the users at ITelo. She has negotiated with their IT department that her system trusts ITelo's identity provider. Their identity provider will use the federation type Virtual Usersand Transient name IDs and include the name of the user, the e-mail address, and the cost center in the SAML response. Donna does not have the costs associated with maintaining user data. She merely has to capture the data for the users when they place orders, including the cost center so she knows whom to bill.

Donna can limit orders to users belonging to a purchasing function. The identity provider can pass an attribute. Based on the value of this attribute, Donna can have the service provider assign groups or roles to the user providing any required authorizations to place orders. All other users can only view the catalog through the assignment of a default role for all transient users. Furthermore it is the job of ITelo's user administrators to determine who belongs to these organizational units. Donna does not have the overhead of maintaining those assignments. She only has to work with the ITelo organization to provide the framework.