What is Identity Provider?
An identity provider is a centralized service that authenticates logins.
Definition and Word Origin
Instead of a separate password for each application, sign-in is done from a single center. The application asks who you are to the service and gets approval. Your password is not distributed to applications, it stays at the center.
How to Know and Use in Daily Life?
Company: All systems with a single sign-on.
Web: Sign in with a social account.
Institutional: Employee lifecycle.
Technical Depth and Architecture
Flow:
giriş → doğrulama → jeton → uygulamaParts:
ID token: The proof of who you are.
Access token: The permission of what you can do.
MFA: Additional proof beyond the password.
Session: Single Sign-On (SSO).
Rule: Token lifespan is kept short, renewal runs in the background.
Frequently Mixed Things
Mistaken for a password manager. One stores the password, the other verifies the identity. One is a safe, the other is a notary.
Use in Different Disciplines
Reception: Key card versus passport.
Notary: Identity verification.
Passport control: Passage with a stamp.
Questions and answers
Is it safe?
Yes. Since the password is not distributed to every application, the attack surface is reduced.
What happens if the system crashes?
Connected applications are affected. Redundancy and an emergency access plan are essential.
What is the difference of SSO?
SSO is a single sign-on experience and provider infrastructure. One is the face, the other is the backbone.
Can I set it up myself?
Yes, there are open-source options. Patching and backup discipline belong to you.
Related terms
This explanation was written in plain language for TreScout with AI and machine-translated from the Turkish original · the Turkish version prevails. If something looks wrong or missing, write to hello@trescout.com. Read in Turkish →