The Identity Provider (IdP) is a service for authentication and authorization to service providers as part of the DFN-AAI. The authentication and authorization infrastructure DFN-AAI is administered by the DFN-Verein. DFN creates the necessary relationship of trust as well as an organizational and technical framework for the exchange of user information between institutions and providers of the DFN-AAI.
As part of the registration process, the IdP first authenticates the users. This is done by entering the user name and password. The registration data are always checked at the WHU IdP. These login data are not transmitted to the service provider. The preset information required for use is then transmitted to the service provider. This can be, for example, the name, the e-mail address, the group membership and matriculation number.
All communication is encrypted. Certificates that have been issued or checked by the DFN-Verein are used for encryption. WHU is responsible for the technical provision and operation of the IdP.