()
The identity provider acts as a security token service (STS) in this pattern.