how to send redirect

[Cantor, Scott]

On 11/6/14, 5:26 PM, "Jason Novotny" <jason.novotny at gmail.com> wrote:
>
>I'm trying to implement SSO outbound, where a user clicks a link on my 
>site and is authenticated to 3rdparty.com.

I don't know what that means, but using SAML directly requires that 
3rdparty.com be a SAML SP.

>I have a test servlet that should do the redirect to thirdparty.com 
>which will refer back to mywebsite.com/sso so that it can get a 
>AuthnRequest and generate a SAMLResponse.

That doesn't really sound like a SAML SSO exchange to me. And aside from 
proxying, there is no way to protect a web site without installing code 
into that web site. You cannot offload that to a different site 
completely, it's physically impossible.

>However, thirdparty.com only allows IP connections coming from the 
>server that is hosting this servlet, so a client's browser cannot 
>connect to thirdparty.com. When I try this out, it just appears to hang 
>since thirdparty.com won't allow browser connections.

Then you can't use SAML browser SSO as a solution unless you're proxying 
access to thirdparty.com with something else that you put an SP on.

-- Scott