one embodiment relates to a method of managing trust relationships between federated identity and service providers . an assertion of a user identity is received from an identity provider via a first federation protocol , wherein a destination service provider is indicated with the assertion . permission of the user identity to access the destination service provider is verified . if permission is verified , the user identity is asserted to the destination service provider via a second federation protocol . other embodiments and features are also disclosed .