salesforce - SAML Response authentication -


scenario:

  1. browser(user) requests resource service provider (sp).
  2. sp redirects (with saml request) identity provider (idp).
  3. since first login, user gives (idp) his/her valid credentials.
  4. idp redirects browser (with saml response includes saml token) sp page.
  5. application has link different application. second application needs validate user credentials same idp.

user clicks on link , browser opens second application. browser contains same saml response sp.

in step 5 how can authenticate user saml response , allow user logged in automatically.

do need sp? not able use sp step 1 external application.

appreciate help

if second application in different administrative domain, should done through own saml sp starting saml request/response exchange idp. if in same domain may able pass intra-domain credential such cookie between first application , second (or rely on full saml well). never reuse same saml response because meant one-time use only.


Comments

Popular posts from this blog

java - Plugin org.apache.maven.plugins:maven-install-plugin:2.4 or one of its dependencies could not be resolved -

Round ImageView Android -

How can I utilize Yahoo Weather API in android -