---
schema_version: "1"
id: 7d660823b3a14af7662630a593f45ae04f2fbadb1cf1d975232f72a4b09dd366
title: Identity Providers and Service Providers
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/mobile_security_providers.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.mobile_security_providers.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f33bb8c22a6817ad0842cd8fe45b76944fb8eef1e44a85a51fcad226c0e0e978
description: "An identity provider is a trusted provider that enables a customer to use single sign-on to access other websites. A service provider is a website that hosts apps. Customers can enable Salesforce as an identity provider, then define one or more service providers, so their users can access other apps directly from Salesforce using single sign-on. This can be a great help to users: instead of having to remember many passwords, they only have to remember one."
products:
  - Security
  - Mobile App
  - Cross Cloud
release: "264"
---
# Identity Providers and Service Providers

An identity provider is a trusted provider that enables a customer to use single sign-on to access other websites. A service provider is a website that hosts apps. Customers can enable Salesforce as an identity provider, then define one or more service providers, so their users can access other apps directly from Salesforce using single sign-on. This can be a great help to users: instead of having to remember many passwords, they only have to remember one.

Salesforce is automatically enabled as an identity provider when a [domain is created](https://help.salesforce.com/apex/HTViewHelpDoc?id=domain_name_setup.htm&language=en_US). After a domain is deployed, admins can add or change identity providers and increase security for their organization by customizing their domain’s login policy.

Enabling Salesforce as an identity provider requires a [Salesforce certificate and key pair that is signed by an external certificate authority (CA-signed) or self-signed](https://help.salesforce.com/apex/HTViewHelpDoc?id=security_keys_about.htm&language=en_US). If customers haven’t generated a Salesforce certificate and key pair, one is automatically created for them when they enable Salesforce as an identity provider. They also have the option of picking an already generated certificate, or creating one.

Salesforce uses the SAML 2.0 standard for single sign-on and generates SAML assertions when configured as an identity provider.

See “[About Identity Providers and Service Providers](https://help.salesforce.com/apex/HTViewHelpDoc?id=identity_provider_about.htm&language=en_US)” for more information.