Skip to main content

← Back to glossary

Term · 1. Core IAM

Relying Party RP

IDM/IGA Domain
AuthN IdM/IGA IETF / RFC ISO/IEC NIST W3C

Definition

Application or service that depends on an Identity Provider to authenticate users and provide identity assertions. In SAML: Service Provider (SP). In OIDC: Client (OAuth 2.0 client). RP must trust the IdP's identity assertions and validate them cryptographically (signature, issuer, audience, expiry).

Application
MidPoint: System that relies on other party (identity provider) to provide identity information.
Standards & regulations
  • NIST SP 800-63-4 «Relying party (RP): RPs provide online transactions and services and rely upon a verifier’s assertion of a subscriber’s identity, typically to process a transaction or grant access to information or a»
  • NIST SP 800-63A-4 «Relying party (RP): An entity that relies on a verifier’s assertion of a subscriber’s identity, typically to process a transaction or grant access to information or a system.»
  • NIST SP 800-73-4 Part 1 «Relying party (RP): An entity that relies upon the subscriber’s credentials, typically to process a transaction or grant access to information or a system.»
  • NIST IR 8149 «Relying Party (RP): An entity that relies upon the subscriber’s authenticator(s) and credentials or a verifier’s assertion of a claimant’s identity, typically to process a transaction or grant access »
  • NIST SP 800-217 (Draft) «relying party (RP): The party that accepts an assertion from an IdP to allow the subscriber to access protected resources.»
  • W3C Recommendation Web Authentication: An API for accessing Public Key Credentials Level 3 «In the context of the WebAuthn API, a relying party is an entity whose web application utilizes WebAuthn to register and authenticate users, and a relying party identifier is a valid domain string ide»
  • FIDO2: Client to Authenticator Protocol (CTAP) 2.1 «Relying Party (RP): A WebAuthn or FIDO2 server application that uses the protocol to authenticate users and that requests, receives, and validates cryptographic authentication assertions from authenti»
  • RFC 8897 «In the context of the Resource Public Key Infrastructure (RPKI), a relying party (RP) is an entity that makes use of the RPKI to validate routing information and therefore relies on the correctness of»
Sources

Related terms

← Back to glossary  ·  Open in main list