Understanding flow / federation

[Bo Lorentsen]

On 2012-09-24 19:48, Cantor, Scott wrote:
> They have to login at some point. SSO involves multiple services and
> whether you have to login again or not in between. The base case of one
> service is just federated authentication. In that model, the users'
> organization runs an IdP and you run an SP.
I am beginning to see that, this may be the way to do it. There is 
really no benefit in setting up an federation, when our customer could 
relate directly to our SP instead. There is really no reason for us to 
have our own idP except for providing id for our own user of cause :-)
> What you're doing is looking at a deployment model involving additional
> intermediaries. Some people think that's unneeded and some people that
> they're completely necessary to effectively manage federated access.
Ok, I am not here to argue :-) I will go for the SP model and let our 
customers connect directly to this, and I will try to forget the 
federation for a while.

/BL