Which of the following statements are correct regarding Shibboleth SSO? $($Select two.$)$

Question $14$ options:

The identity provider $($IdP$)$ authenticates the user.

The service provider $($SP$)$ authenticates the user.

The identity provider $($IdP$)$ performs the SSO process for the protected resource.

The service provider $($SP$)$ performs the SSO process for the protected resource.