Also called SSO. Allows users to sign in to a single location - an identity provider (IdP) - that then gives the user access to other service providers.