Q: What is the nature of this tool, is it functioning as an IdP or SP beyond the end user's web browser?

A: In essence the CompliSpce IdP tool is acting as both:

1. Each Ideagen Policy Logic app acts as an SP which will be configured to use the Ideagen Policy Logic IdP for authentication.
2. Ideagen Policy Logic IdP will then act in a proxy role as an SP and pass on authentication requests to the client IdP
3. The client IdP will authenticate the user and provide the usual SAML attributes.
4. Ideagen Policy Logic IdP will then validate the SAML details, including the requested SP and allowed site for the user and provide authentication back to the Ideagen Policy Logic SP

This technical diagram shows a general overview of how the Ideagen Policy Logic IdP Tool functions as both IdP and SP.

While this diagram shows an example of the Ideagen Policy Logic IdP acting as a Federated IdP (Proxy) to connect the SSO service to our product suite (OAuth protocol example).