Who is responsible for granting access to a user in federated identity management?

Who is responsible for granting access to a user in federated identity management?
A. Identity provider
B. Relying party
C. SaaS provider
D. User