Question: what is the difference between idp and sp?
Answer: The IdP creates an SSO Response with a SAML 2.0 Assertion containing user information as well as authentication data, and redirects the user's browser to the SP with the message and the RelayState parameter. ... The SP validates the SAML 2.0 Assertion and creates an SSO session for the user.