Skip to content

Commit d653aab

Browse files
authored
Update +page.markdoc
1 parent 6373dc9 commit d653aab

File tree

1 file changed

+11
-11
lines changed
  • src/routes/blog/post/understanding-Idp-vs-sp-initiated-sso

1 file changed

+11
-11
lines changed

src/routes/blog/post/understanding-Idp-vs-sp-initiated-sso/+page.markdoc

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
layout: post
3-
title: "Understanding IdP- vs SP-Initiated SSO"
4-
description: A quick guide to IdP- vs SP-initiated SSO and when to use each.
3+
title: "Understanding IdP vs SP-Initiated SSO"
4+
description: A quick guide to IdP vs SP-initiated SSO and when to use each.
55
date: 2025-06-16
66
cover: /images/blog/understanding-Idp-vs-sp-initiated-sso/cover.png
77
timeToRead: 06
@@ -17,7 +17,7 @@ This guide breaks down the differences between **Identity Provider (IdP)-initiat
1717

1818
# What is IdP-Initiated SSO?
1919

20-
First, a quick refresher: an **Identity Provider (IdP)** manages user identities, validating who a user is before granting access to different applications.
20+
First, a quick refresher: an **Identity Provider (IdP)** manages user identities, validating who a user is before granting access to different applications. Here’s a quick [overview](https://appwrite.io/docs/products/auth/identities) of how Appwrite handles identity and access.
2121

2222
In an IdP-initiated SSO flow, the user’s journey starts at the IdP itself:
2323

@@ -27,7 +27,7 @@ In an IdP-initiated SSO flow, the user’s journey starts at the IdP itself:
2727
2. The IdP displays a dashboard of connected applications.
2828
3. The user selects a service to access.
2929
4. The IdP sends a secure authentication token (such as a SAML assertion) to the Service Provider (SP).
30-
5. The SP grants access based on the token.
30+
5. The SP grants access based on the [token](https://appwrite.io/docs/products/auth/tokens).
3131

3232
# Advantages
3333

@@ -41,7 +41,7 @@ In an IdP-initiated SSO flow, the user’s journey starts at the IdP itself:
4141
- **Single point of failure**: If the IdP is compromised, multiple services could be at risk.
4242
- **Integration challenges**: Some services may not fully support IdP-initiated workflows.
4343

44-
{% call_to_action title="Customer identity without the hassle" description="Add secure authentication for your users in just a couple of minutes." point1="GDPR, HIPAA and SOC 2 compliant" point2="Built-in security" point3="Multi-factor authentication" point4="Integrates with your favourite SDK" cta="Contact sales" url="https://appwrite.io/contact-us/enterprise" /%}
44+
{% call_to_action title="Customer identity without the hassle" description="Add secure authentication for your users in just a couple of minutes." point1="GDPR, HIPAA and SOC 2 compliant" point2="Built-in security" point3="Multi-factor authentication" point4="Integrates with your favourite SDK" cta="Contact sales" url="/contact-us/enterprise" /%}
4545

4646
# What is SP-Initiated SSO?
4747

@@ -90,21 +90,21 @@ In SP-initiated SSO, the process begins when a user attempts to log into an appl
9090
- **B2B and B2C platforms**: Especially when users might come in via bookmarks, emails, or direct links.
9191
- **Dynamic environments**: Where new apps are frequently added or removed.
9292

93-
Pro tip: SP-initiated flows are often complemented by adaptive MFA to enhance security without compromising the user experience.
93+
Pro tip: SP-initiated flows are often complemented by [adaptive MFA](https://appwrite.io/docs/products/auth/mfa) to enhance security without compromising the user experience.
9494

9595
# When to use both approaches
9696

9797
Many organizations implement both IdP- and SP-initiated SSO to serve different user needs:
9898

9999
- **Employee and partner ecosystems**: Employees might use IdP dashboards while partners or customers prefer direct access.
100100
- **Hybrid cloud setups**: Supporting a mix of legacy and modern applications.
101-
- **Adaptive security strategies**: Choosing the flow based on device, location, or user profile.
101+
- **Adaptive security strategies**: Choosing the flow based on device, location, or user profile.
102102

103-
Choosing the right SSO initiation method,or blending both, can dramatically impact security, user satisfaction, and scalability. Evaluate your platform's user behavior, security posture, and integration needs to pick the best approach for your environment.
103+
Choosing the right SSO initiation method,or blending both, can dramatically impact [security](https://appwrite.io/docs/products/auth/security), user satisfaction, and scalability. Evaluate your platform's user behavior, security posture, and integration needs to pick the best approach for your environment.
104104

105105
# Futher reading
106106

107-
- [Appwrite Authentication docs](https://appwrite.io/docs/products/auth)
108-
- [Developer's guide to user authentication](https://appwrite.io/blog/post/guide-to-user-authentication)
109-
- [Appwrite Authentication overview](https://appwrite.io/products/auth)
107+
- [Appwrite Authentication docs](/docs/products/auth)
108+
- [Developer's guide to user authentication](/blog/post/guide-to-user-authentication)
109+
- [Appwrite Authentication overview](/products/auth)
110110

0 commit comments

Comments
 (0)