Glossary: Modern Vulnerabilities, Malware and Physical Attacks

Identity provider (IdP)

Also written: IdP, identity providers

A service that checks who a user is and vouches for them to other apps by signing tokens. Because every app trusts it, an attacker who takes it over, or steals its signing key or a session, reaches everything.