How does federated access work?

Last updated on April 09, 2021

Federated access is a type of access that is based on trust. A federation manages infrastructure that facilitates this trust. Both the Identity Provider (IdP) and Service Provider (SP) are members of the federation and comply with its rules.

diagram of Federated access

  • The IdP is managed by an institution and the institution knows its users.
  • The SP is managed by a resource owner, for instance Elsevier, and it streamlines access to its resources.

The principle of federated access

When an institutional user wants to access a subscribed resource with their institutional credentials, the IdPs and SP exchange data based on a predefined set of rules and determine whether or not to let the user access the resource.

  1. A user visits a resource.
  2. The resource finds the user's institution in SP.
  3. The SP sends a SAML authentication request to the IdP.
  4. The IdP asks the user to confirms their identity.
  5. The user confirms their identity to the IdP.
  6. The IdP sends a SAML authentication response back to SP.
  7. The SP provides the resource with relevant information about the institution and the user.

steps federated access

If all the above checks are positive, the user gets access to the resource.

If you're setting up federated access for your institution, view this page: How do I set up federated access as a librarian or administrator?.

Did we answer your question?

Related answers

Recently viewed answers

Functionality disabled due to your cookie preferences

For further assistance: