{"id":730,"date":"2023-07-24T14:16:07","date_gmt":"2023-07-24T06:16:07","guid":{"rendered":"https:\/\/www.ruianding.com\/blog\/?p=730"},"modified":"2024-03-05T21:20:11","modified_gmt":"2024-03-05T13:20:11","slug":"idp-initiated-sign-on-vs-sp-initiated-sign-on","status":"publish","type":"post","link":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/","title":{"rendered":"IDP Initiated Sign-On vs. SP Initiated Sign-On"},"content":{"rendered":"\n<h4 class=\"wp-block-heading\">IDP Initiated Sign-On<\/h4>\n\n\n\n<p>IDP initiated sign-on occurs when a user starts the authentication process from the Identity Provider&#8217;s side. The Identity Provider is responsible for authenticating the user&#8217;s identity, and once the user is authenticated, the IDP sends the necessary security tokens to the Service Provider, allowing the user to access the desired application or service without requiring further login credentials. In other words, the user starts at the IDP, which then passes the necessary credentials and tokens to the SP to grant access.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png\" alt=\"\" class=\"wp-image-732\" width=\"629\" height=\"376\"\/><\/figure>\n\n\n\n<p>Typically, in an IDP initiated sign-on scenario, the user accesses the IDP&#8217;s login page directly, and upon successful authentication, the IDP generates the security tokens and redirects the user to the intended application or service hosted by the Service Provider.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1618\" height=\"759\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-86.png\" alt=\"\" class=\"wp-image-737\"\/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">SP Initiated Sign-On<\/h4>\n\n\n\n<p>SP initiated sign-on, on the other hand, occurs when a user initiates the authentication process from the Service Provider side. In this case, the user directly accesses the application or service provided by the SP and attempts to access a resource that requires authentication. The Service Provider then detects that the user is not yet authenticated and redirects the user to the Identity Provider login page to enter their credentials.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-84.png\" alt=\"\" class=\"wp-image-731\" width=\"628\" height=\"379\"\/><\/figure>\n\n\n\n<p>After successful authentication by the IDP, the user is redirected back to the Service Provider with the necessary security tokens. The Service Provider can then validate these tokens and grant the user access to the requested resource.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-87.png\" alt=\"\" class=\"wp-image-738\" width=\"273\" height=\"332\"\/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Difference between IDP Initiated Sign-On and SP Initiated Sign-On<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>IDP Initiated Sign-On: <\/strong>The authentication process starts at the Identity Provider&#8217;s side. The user begins at the IDP&#8217;s login page and is then redirected to the Service Provider after successful authentication.<\/li>\n\n\n\n<li><strong>SP Initiated Sign-On: <\/strong>The authentication process starts at the Service Provider&#8217;s side. The user begins by attempting to access a resource at the SP, which then redirects the user to the IDP&#8217;s login page to enter their credentials.<\/li>\n<\/ul>\n\n\n\n<p>Both IDP initiated and SP initiated sign-on approaches serve the same purpose of providing SSO capabilities in a federated identity environment. The choice of which method to use often depends on the specific requirements and design of the authentication system. Some organizations may prefer one over the other based on user experience or security considerations.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>IDP Initiated Sign-On IDP initiated sign-on occurs when a user starts the authentication process from the Identity Provider&#8217;s side. The Identity Provider is responsible for authenticating the user&#8217;s identity, and once the user is authenticated, the IDP sends the necessary security tokens to the Service Provider, allowing the user to access the desired application or [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[42],"tags":[5],"class_list":["post-730","post","type-post","status-publish","format-standard","hentry","category-adfs","tag-adfs"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>IDP Initiated Sign-On vs. SP Initiated Sign-On - \u6781\u7b80IT\uff5cSimpleIT<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IDP Initiated Sign-On vs. SP Initiated Sign-On - \u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"og:description\" content=\"IDP Initiated Sign-On IDP initiated sign-on occurs when a user starts the authentication process from the Identity Provider&#8217;s side. The Identity Provider is responsible for authenticating the user&#8217;s identity, and once the user is authenticated, the IDP sends the necessary security tokens to the Service Provider, allowing the user to access the desired application or [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/\" \/>\n<meta property=\"og:site_name\" content=\"\u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-24T06:16:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-05T13:20:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png\" \/>\n<meta name=\"author\" content=\"Ruian Ding\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ruian Ding\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/\"},\"author\":{\"name\":\"Ruian Ding\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"headline\":\"IDP Initiated Sign-On vs. SP Initiated Sign-On\",\"datePublished\":\"2023-07-24T06:16:07+00:00\",\"dateModified\":\"2024-03-05T13:20:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/\"},\"wordCount\":381,\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png\",\"keywords\":[\"ADFS\"],\"articleSection\":[\"ADFS\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/\",\"name\":\"IDP Initiated Sign-On vs. SP Initiated Sign-On - \u6781\u7b80IT\uff5cSimpleIT\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png\",\"datePublished\":\"2023-07-24T06:16:07+00:00\",\"dateModified\":\"2024-03-05T13:20:11+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png\",\"width\":829,\"height\":495},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.ruianding.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IDP Initiated Sign-On vs. SP Initiated Sign-On\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\",\"url\":\"https:\/\/www.ruianding.com\/blog\/\",\"name\":\"Ruian's Tech Troubleshooting Toolbox\",\"description\":\"Debug the World.\",\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"alternateName\":\"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\",\"name\":\"Ruian Ding\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"width\":284,\"height\":284,\"caption\":\"Ruian Ding\"},\"logo\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.\",\"sameAs\":[\"https:\/\/www.ruianding.com\"],\"url\":\"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"IDP Initiated Sign-On vs. SP Initiated Sign-On - \u6781\u7b80IT\uff5cSimpleIT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/","og_locale":"en_US","og_type":"article","og_title":"IDP Initiated Sign-On vs. SP Initiated Sign-On - \u6781\u7b80IT\uff5cSimpleIT","og_description":"IDP Initiated Sign-On IDP initiated sign-on occurs when a user starts the authentication process from the Identity Provider&#8217;s side. The Identity Provider is responsible for authenticating the user&#8217;s identity, and once the user is authenticated, the IDP sends the necessary security tokens to the Service Provider, allowing the user to access the desired application or [&hellip;]","og_url":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/","og_site_name":"\u6781\u7b80IT\uff5cSimpleIT","article_published_time":"2023-07-24T06:16:07+00:00","article_modified_time":"2024-03-05T13:20:11+00:00","og_image":[{"url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png","type":"","width":"","height":""}],"author":"Ruian Ding","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ruian Ding","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#article","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/"},"author":{"name":"Ruian Ding","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"headline":"IDP Initiated Sign-On vs. SP Initiated Sign-On","datePublished":"2023-07-24T06:16:07+00:00","dateModified":"2024-03-05T13:20:11+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/"},"wordCount":381,"publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png","keywords":["ADFS"],"articleSection":["ADFS"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/","url":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/","name":"IDP Initiated Sign-On vs. SP Initiated Sign-On - \u6781\u7b80IT\uff5cSimpleIT","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png","datePublished":"2023-07-24T06:16:07+00:00","dateModified":"2024-03-05T13:20:11+00:00","breadcrumb":{"@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#primaryimage","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-85.png","width":829,"height":495},{"@type":"BreadcrumbList","@id":"https:\/\/www.ruianding.com\/blog\/idp-initiated-sign-on-vs-sp-initiated-sign-on\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ruianding.com\/blog\/"},{"@type":"ListItem","position":2,"name":"IDP Initiated Sign-On vs. SP Initiated Sign-On"}]},{"@type":"WebSite","@id":"https:\/\/www.ruianding.com\/blog\/#website","url":"https:\/\/www.ruianding.com\/blog\/","name":"Ruian's Tech Troubleshooting Toolbox","description":"Debug the World.","publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"alternateName":"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b","name":"Ruian Ding","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","width":284,"height":284,"caption":"Ruian Ding"},"logo":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/"},"description":"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.","sameAs":["https:\/\/www.ruianding.com"],"url":"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/comments?post=730"}],"version-history":[{"count":5,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/730\/revisions"}],"predecessor-version":[{"id":1864,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/730\/revisions\/1864"}],"wp:attachment":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/media?parent=730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/categories?post=730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/tags?post=730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}