This page will describe some of the functionality that is currently out of scope. This is not an exhaustive list.

Authorization

The Himsa IdP will provide authentication but will not issue tokens for accessing a “Himsa Member resource server”.
In the diagram below it is assumed that the “Himsa Member resource Server“ will only allow access to apps that provide tokens from an IdP they trust.
It is also assumed that Himsa developed API’s will only accept/trust tokens issued by the Himsa IdP, hence in some situations the member company may need to utilize a second (trusted) IdP.