Glossary

Relative to these issues there is always some confusion of terminology and protocols.

For the purposes of this guide, the terms Identity Provider (IdP) and Service Provider (SP) will be used for SAML, and the terms OpenID Provider (OP) and Relying Party (RP) will be used for OIDC. The relationship is IdP-OP and SP-RP.

OIDC, SAML e OAuth2 are open standard protocols designed with different but related goals. SAML and OIDC are designed to authenticate a user (Authentication), providing user identity data to a service. Both protocols can be the basis for Identity Providers (IdPs) offering a range of services and user identity management and can be used for SSO applications.

OAuth2 is designed as an authorization protocol(Authorization) that allows a user to access specific resources offered by a producer.