How to pass on user details to backend applications ?

[Cantor, Scott]

On 5/15/15, 5:15 PM, "Amit Thukral" <amit.thukral403 at gmail.com> wrote:
>
>For SP initiated SSO, Idp would send the SAML token (assertion) to the SP.
>User details like username may or may not be present in assertion based on whether this attribute is configured on Idp, am I correct ?

Yes, but that has nothing to do with how it's initiated, the IdP to SP flow is the same.

>In that case, how can we pass on username and password to backend applications like outlook or sharepoint server ?

You don't. SSO is not meant to throw passwords around, it's used to avoid that.

>1) Is the SAML assertion to be passed on to the outlook ?

No.

> 
>2) How is that information can be passed on to the outlook ? I can use only headers.

Assuming you're talking about OWA, I suspect it requires integration APIs be used that I wouldn't know anything about.

None of this is a topic for this list. If you're trying to use the Shibboleth SP and asking about some particular application, you'd probably need to ask whoever supports that application about SSO integration, but SP deployment questions go to the users list.

-- Scott