In SSO lingo, an application or website that a user might want to log into—anything from an email client to a bank website to a network share—is a service provider. The service provider can put parameters around how authentication works: for instance, it can require that the identity provider use two-factor authentication (2FA) or biometrics.
