salesforce - SAML Response authentication -
scenario:
- browser(user) requests resource service provider (sp).
- sp redirects (with saml request) identity provider (idp).
- since first login, user gives (idp) his/her valid credentials.
- idp redirects browser (with saml response includes saml token) sp page.
- application has link different application. second application needs validate user credentials same idp.
user clicks on link , browser opens second application. browser contains same saml response sp.
in step 5 how can authenticate user saml response , allow user logged in automatically.
do need sp? not able use sp step 1 external application.
appreciate help
if second application in different administrative domain, should done through own saml sp starting saml request/response exchange idp. if in same domain may able pass intra-domain credential such cookie between first application , second (or rely on full saml well). never reuse same saml response because meant one-time use only.
Comments
Post a Comment