D9.1 SAML2 Terminology used

An acronym for "Security Assertion Markup Language 2.0", which is the standard implemented by AD FS and Shibboleth to allow integration with applications (such as Chorus).

The third party service used by Chorus (as a Service Provider) to authenticate a user. This is provided by either your AD FS or Shibboleth service.

The part of Chorus which requests authentication from the IdP.

The application that is using the SP and IdP to authenticate, in this case Chorus.

The unique ID of the IdP or SP. Normally it looks like a URL, but it is not necessary for the Entity ID to be resolvable.

The details of the IdP or SP. If Third Light can connect to the IdP (and vice-versa) you can use the URL and this enables automatic lookup of the metadata. Otherwise, you will have to manually supply the metadata.

This is the primary data returned when Chorus completes authentication with the IdP.

Attributes are pieces of data about the user who has been authenticated by the IdP. This allows Chorus to know who has been authenticated and to which group the user belongs.