Configuration Guides › Federation Security Services Guide › Configure SAML 2.0 Affiliations At the Identity Provider › Affiliation Overview › Affiliations for Single Sign-On

Affiliations for Single Sign-On

In a single sign-on use case, the Service Provider sends a request for an assertion to an Identity Provider. The AuthnRequest contains an attribute that specifies an affiliation identifier.

When the Identity Provider receives the request, it

• Verifies that the Service Provider is a member of the affiliation identified in the AuthnRequest.
• Generates the assertion with the Name ID shared by the affiliation.
• Returns this assertion to the Service Provider.

Upon receiving the assertion, authentication takes place at the Service Provider.