What is a role of an Identity Provider in a Single Sign-on setup using SAML?

What is a role of an Identity Provider in a Single Sign-on setup using SAML?

A. Consume assertion
B. Revoke assertion
C. Validate assertion

D. Create assertion