IdP initiated SSO

[Cantor, Scott]

> Hi Mike, we don’t actually use OIF for Learn. The Learn product has its own
> SAML solution, unrelated to OIF, and it’s only IDP-initiated.

Oh well, my laughter is short lived.

Anyway, that opens up any number of possibilities centering around "this thing isn't correctly implemented" so there could be issues with the encoding of the message that might not be getting logged well. I can't say offhand whether some of the other possible problems would or wouldn't be, things like mismatched Destination attributes.

-- Scott