...
When a user attempts to access an SP, the SP requests authentication information from an IdP. If the user is successfully authenticated, the IdP sends a security assertion to the SP, which includes information about the user's identity and authorization to access the requested resource or service.
...