Re:SAML Is Insecure by Design
by mwcampbell on Thursday August 05, 2021 @06:06PM
(#28080617)
If I'm not mistaken, the correct terms are identity provider and service provider, respectively. After all, they're both servers, in the sense that they both receive requests from the other.
[ Parent
| on HN ]
The coolest part imo is that the the servers aren't communicating directly to one another. The client brokers the communication so that both IDP and SP can be on completely different networks (bridged by the client). You probably already knew this but sharing because I find it interesting (and for the edification of those that are unfamiliar).