A standard protocol for authenticating users during single sign-on (SSO). An identity provider issues an assertion that authenticates users to a service provider.