How deeply does Authorization in Action cover identity provider?

Explains accounts, authentication, attributes, protocols, and trust agreements, but defers protocol implementation details.

Identity provider

As explained in Authorization in Action

A central identity provider is a service that centrally manages digital identities and supplies authentication or identity information to relying applications or other systems.

An identity provider (IdP) centrally manages accounts, authenticates users, and supplies identity attributes to relying parties (RPs). In an enterprise example, an employer authenticates an employee for a benefits provider, returning only the attributes agreed between the organizations. section 2.5.2

The IdP–RP exchange uses a federation protocol such as Security Assertion Markup Language (SAML), OAuth, or OpenID Connect. Trust frameworks—formal agreements or click-through terms—define how identity data may be used and what guarantees the IdP provides. section 2.5.2

Identity in a multi-tenant platform

A multi-tenant collaboration platform must obtain identity from outside its own system and keep tenancy as a distinct, enforceable boundary. Supporting tenant-controlled identity providers prevents the platform from making every tenant a subject of its internal identity system. section 13.3

How Authorization in Action covers it

liveBook manning.com

Read Authorization in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

ASP.NET Core in Action, 3eA third-party identity service is an externally operated identity provider that supplies authentication and identity-management capabilities to applications.
liveBook manning.com

Effective Platform EngineeringAn identity provider is a system that authenticates entities and supplies identity or authorization information to relying applications and services.
liveBook manning.com

Software Security for DevelopersAn identity provider is a system that authenticates identities and provides identity information to relying applications or services.
liveBook manning.com

.NET in Action, Second EditionAn identity provider is a service that authenticates users and supplies identity and authorization metadata to client applications.
liveBook manning.com

Secure APIsAn identity provider is a service that authenticates identities and issues identity or authorization artifacts to relying clients.
liveBook manning.com

MongoDB 8.0 in Action, Third EditionAn identity provider is a service that authenticates users and supplies verified identity information to relying applications or services.
liveBook manning.com

Architecting an Apache Iceberg LakehouseAn identity provider is a system that authenticates users or services and supplies their identities and authorization context to other systems.
liveBook manning.com

Build Python Web Apps with StreamlitAn identity provider is a service that authenticates users and supplies identity information to relying applications.
liveBook manning.com

Terraform in Depth: Infrastructure as Code with Terraform and OpenTofuAn identity provider is a system that authenticates identities and issues identity assertions or tokens to relying systems.
liveBook manning.com

Grokking Web Application SecurityAn identity provider is a service that authenticates users and supplies identity assertions or authentication services to other applications.
liveBook manning.com

Building Distributed Applications that WorkAn identity provider is a system that authenticates principals and supplies identity information and access-related assertions to applications.

Compare how 12 books explain identity provider →

Related concepts

single sign-onused by · Single sign-on is an authentication arrangement in which one authentication event enables a user to access multiple applications or services without signing in separately to each.
federated identity integrationused by · Federated identity integration is an arrangement in which systems or organizations trust identity and authentication assertions exchanged across their boundaries.
security tokenproduces · A security token is a credential or assertion presented to a service to convey authenticated identity, authorization, or session information.
tokenproduces · A token is a discrete unit of text, such as a word, word fragment, character, or symbol, represented and processed as an element by a language model.
Microsoft Entra IDused by · Microsoft Entra ID is Microsoft's cloud-based identity and access-management service for authenticating users, applications, and services and controlling their access to resources.

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.