CISSP: Certified Information Systems Security Professional

A SAML federation commonly includes a client or user agent, a service provider (SP), and an identity provider (IdP). The IdP creates a SAML assertion—a security token containing claims about the authenticated principal—which the SP uses when making access-control decisions.