---
title: Federated Pairs
slug: access-guide/federated-pairs
docTags: 
createdAt: 2026-10-09T06:41:05.755Z
---

Ivanti Access acts as a proxy between the service provider (SP) and identity provider (IdP). In a federated pair set up, Ivanti Access appears as a service provider (SP) to your identity provider (IdP) and as an IdP to your SP. A federated pair is the original IdP and SP pair for which Access is used as the proxy.

This following describes the steps required to set up a three-way trust between the SP, IdP, and Access and contains the following:

::::LinkArray{contentSource="DOCS" itemsPerRow="1" sortOption="DEFAULT" displayMode="LINK" sourceParentDocId="M8vHyUFQPV8HC1MWrr95A" childrenDocs="[{&#x22;docId&#x22;:&#x22;hdssLvUFu83Xj4c3AIHft&#x22;,&#x22;docTitle&#x22;:&#x22;Configuring federated pairs&#x22;},{&#x22;docId&#x22;:&#x22;-bJUQVn09ldwJnpxdZnKF&#x22;,&#x22;docTitle&#x22;:&#x22;Use Cases for distinctive deployments&#x22;},{&#x22;docId&#x22;:&#x22;OQ7VAxhNIEmCbzv2f_5_0&#x22;,&#x22;docTitle&#x22;:&#x22;Signing certificates&#x22;},{&#x22;docId&#x22;:&#x22;vSOsaucm3LxCDE-H9klVq&#x22;,&#x22;docTitle&#x22;:&#x22;Service provider (SP) metadata&#x22;},{&#x22;docId&#x22;:&#x22;pzFnULdI_suKXaZ97YSf6&#x22;,&#x22;docTitle&#x22;:&#x22;IdP initiated login&#x22;},{&#x22;docId&#x22;:&#x22;9QGct3g_Ltl00x4T6Kg5D&#x22;,&#x22;docTitle&#x22;:&#x22;SAML response signature&#x22;},{&#x22;docId&#x22;:&#x22;4lH-c9Lp2P1n6iL6fkLcq&#x22;,&#x22;docTitle&#x22;:&#x22;Encrypting SAML assertions&#x22;},{&#x22;docId&#x22;:&#x22;TBphO-vfBSM64SHpRO2bc&#x22;,&#x22;docTitle&#x22;:&#x22;Identity provider (IdP) metadata&#x22;},{&#x22;docId&#x22;:&#x22;K-DMCPVFBx7YP9cxAOmUX&#x22;,&#x22;docTitle&#x22;:&#x22;Office 365 settings&#x22;},{&#x22;docId&#x22;:&#x22;gNkCKCRtYjZjrMoAuHGFb&#x22;,&#x22;docTitle&#x22;:&#x22;Cookbook for Ivanti Connect Secure&#x22;},{&#x22;docId&#x22;:&#x22;Mz9D6BeqsWlZhuAmldhox&#x22;,&#x22;docTitle&#x22;:&#x22;Active Logon Policy for Office 365&#x22;},{&#x22;docId&#x22;:&#x22;os9oGJAkQ_LCwoJzZDygy&#x22;,&#x22;docTitle&#x22;:&#x22;Publishing a profile&#x22;},{&#x22;docId&#x22;:&#x22;CaYUzwipJrgkrcBQnQ6VG&#x22;,&#x22;docTitle&#x22;:&#x22;Azure Hybrid Domain-Join with Ivanti Access&#x22;},{&#x22;docId&#x22;:&#x22;S6F5CYfEbtiWG3dd4LUX-&#x22;,&#x22;docTitle&#x22;:&#x22;View federated pairs&#x22;},{&#x22;docId&#x22;:&#x22;kisnsFgbX6efLv2TKimkV&#x22;,&#x22;docTitle&#x22;:&#x22;Renewing the SSL certificate&#x22;},{&#x22;docId&#x22;:&#x22;9VDvclk0yFzZiok5hspip&#x22;,&#x22;docTitle&#x22;:&#x22;Uploading proxy metadata&#x22;},{&#x22;docId&#x22;:&#x22;-4EX_YM_DH7E4QHTMdXxY&#x22;,&#x22;docTitle&#x22;:&#x22;Verifying traffic flow&#x22;},{&#x22;docId&#x22;:&#x22;Gwy8ZuBzbeYtFL8nZVTmk&#x22;,&#x22;docTitle&#x22;:&#x22;Cookbook for Ivanti Neurons&#x22;}]"}
:::LinkArrayItem{headerType="NONE" docId="hdssLvUFu83Xj4c3AIHft" displayMode="LINK"}
[Configuring federated pairs](docId\:hdssLvUFu83Xj4c3AIHft)
:::

:::LinkArrayItem{headerType="NONE" docId="-bJUQVn09ldwJnpxdZnKF" displayMode="LINK"}
[Use Cases for distinctive deployments](docId:-bJUQVn09ldwJnpxdZnKF)
:::

:::LinkArrayItem{headerType="NONE" docId="OQ7VAxhNIEmCbzv2f_5_0" displayMode="LINK"}
[Signing certificates](docId\:OQ7VAxhNIEmCbzv2f_5_0)
:::

:::LinkArrayItem{headerType="NONE" docId="vSOsaucm3LxCDE-H9klVq" displayMode="LINK"}
[Service provider (SP) metadata](docId\:vSOsaucm3LxCDE-H9klVq)
:::

:::LinkArrayItem{headerType="NONE" docId="pzFnULdI_suKXaZ97YSf6" displayMode="LINK"}
[IdP initiated login](docId\:pzFnULdI_suKXaZ97YSf6)
:::

:::LinkArrayItem{headerType="NONE" docId="9QGct3g_Ltl00x4T6Kg5D" displayMode="LINK"}
[SAML response signature](docId:9QGct3g_Ltl00x4T6Kg5D)
:::

:::LinkArrayItem{headerType="NONE" docId="4lH-c9Lp2P1n6iL6fkLcq" displayMode="LINK"}
[Encrypting SAML assertions](docId:4lH-c9Lp2P1n6iL6fkLcq)
:::

:::LinkArrayItem{headerType="NONE" docId="TBphO-vfBSM64SHpRO2bc" displayMode="LINK"}
[Identity provider (IdP) metadata](docId\:TBphO-vfBSM64SHpRO2bc)
:::

:::LinkArrayItem{headerType="NONE" docId="K-DMCPVFBx7YP9cxAOmUX" displayMode="LINK"}
[Office 365 settings](docId\:K-DMCPVFBx7YP9cxAOmUX)
:::

:::LinkArrayItem{headerType="NONE" docId="gNkCKCRtYjZjrMoAuHGFb" displayMode="LINK"}
[Cookbook for Ivanti Connect Secure](docId\:gNkCKCRtYjZjrMoAuHGFb)
:::

:::LinkArrayItem{headerType="NONE" docId="Mz9D6BeqsWlZhuAmldhox" displayMode="LINK"}
[Active Logon Policy for Office 365](docId\:Mz9D6BeqsWlZhuAmldhox)
:::

:::LinkArrayItem{headerType="NONE" docId="os9oGJAkQ_LCwoJzZDygy" displayMode="LINK"}
[Publishing a profile](docId\:os9oGJAkQ_LCwoJzZDygy)
:::

:::LinkArrayItem{headerType="NONE" docId="CaYUzwipJrgkrcBQnQ6VG" displayMode="LINK"}
[Azure Hybrid Domain-Join with Ivanti Access](docId\:CaYUzwipJrgkrcBQnQ6VG)
:::

:::LinkArrayItem{headerType="NONE" docId="S6F5CYfEbtiWG3dd4LUX-" displayMode="LINK"}
[View federated pairs](docId\:S6F5CYfEbtiWG3dd4LUX-)
:::

:::LinkArrayItem{headerType="NONE" docId="kisnsFgbX6efLv2TKimkV" displayMode="LINK"}
[Renewing the SSL certificate](docId\:kisnsFgbX6efLv2TKimkV)
:::

:::LinkArrayItem{headerType="NONE" docId="9VDvclk0yFzZiok5hspip" displayMode="LINK"}
[Uploading proxy metadata](docId:9VDvclk0yFzZiok5hspip)
:::

:::LinkArrayItem{headerType="NONE" docId="-4EX_YM_DH7E4QHTMdXxY" displayMode="LINK"}
[Verifying traffic flow](docId:-4EX_YM_DH7E4QHTMdXxY)
:::

:::LinkArrayItem{headerType="NONE" docId="Gwy8ZuBzbeYtFL8nZVTmk" displayMode="LINK"}
[Cookbook for Ivanti Neurons](docId\:Gwy8ZuBzbeYtFL8nZVTmk)
:::
::::