Security Token Service (STS) and Federation

Federation enables single sign-on across organizations.

Key Concepts

- Identity Provider (IdP)
- Service Provider (SP)
- Security tokens (SAML, JWT)
- Trust relationships
- Claims-based identity

Protocols

- SAML 2.0
- OpenID Connect
- WS-Federation
- OAuth 2.0

Use Cases

- Enterprise SSO
- B2B partner access
- Cloud application access
- API authentication
- Mobile app auth