Application or service relying on an identity provider for authentication. Trusts assertions from the IdP without managing credentials directly.