| Term                                          | Definition                                                                                     |
|-----------------------------------------------|-----------------------------------------------------------------------------------------------|
| Administrator                                 | The person responsible for setting up the SAML integration. The administrator is also responsible for granting access to users. |
| Assertion Consumer Service (ACS) URL         | The endpoint where SAML responses are posted. Often referred to as the SSO URL.             |
| Attributes                                    | Information that identifies a user.                                                         |
| Entity ID (Audience URI)                     | A globally unique name for an IdP or SP.                                                   |
| Identity Provider (IdP)                       | A service responsible for managing identities and access control.                           |
| Name ID                                       | A value that identifies a named user.                                                       |
| SAML Metadata                                 | An XML file that contains the configuration settings required for integrating the IdP with RiskOS™. |
| SAML Response                                 | Contains the SAML assertion that tells RiskOS™ that a user is signed in. Also includes user attributes for the specified user. |
| Service Provider (SP)                         | A service providing features the user needs. In this case, the SP is the RiskOS™.          |