What are the roles of an identity provider? (Blog: IdP)