salesforce - SAML Response authentication -


scenario:

  1. browser(user) requests resource service provider (sp).
  2. sp redirects (with saml request) identity provider (idp).
  3. since first login, user gives (idp) his/her valid credentials.
  4. idp redirects browser (with saml response includes saml token) sp page.
  5. application has link different application. second application needs validate user credentials same idp.

user clicks on link , browser opens second application. browser contains same saml response sp.

in step 5 how can authenticate user saml response , allow user logged in automatically.

do need sp? not able use sp step 1 external application.

appreciate help

if second application in different administrative domain, should done through own saml sp starting saml request/response exchange idp. if in same domain may able pass intra-domain credential such cookie between first application , second (or rely on full saml well). never reuse same saml response because meant one-time use only.


Comments

Popular posts from this blog

java - Unable to make sub reports with Jasper -

scala - play framework: Modules were resolved with conflicting cross-version suffixes -

Save and close a word document by giving a name in R -