Single Sign-On Service › SSO Getting Started Guide › SSO using a Third-party IdP and Self-registration › Configure Federated Partnerships › Create the Local SP-to-Remote IdP Partnership

Create the Local SP-to-Remote IdP Partnership

Set up a partnership where CA CloudMinder is the local SP and the third-party is the remote IdP. In this scenario, when a user requests access to an application, the system presents a page from which the user can choose a site to use for login. The user can log in directly if they have an account at the tenant.

This scenario assumes that a consumer application, such as a rewards programs, is the target application. It is unlikely that the user is known to CA CloudMinder. Therefore, the user selects a third-party where they have an account.

The purpose of the SP-to-IdP partnership is to direct the user to the appropriate third-party IdP. The third-party IdP generates an assertion based on the account information it has for the user after that user logs in.

The following figure shows the configuration tasks for the local SP-to-Remote IdP partnership: