For single sign-on (SSO), typically the “service provider” is the entity that receives the SSO token and then queries the “identity provider” to verify the token and establish the logged-in user’s identity before providing the requested business services