IdP initiated SSO

Eric Goodman Eric.Goodman at ucop.edu
Thu Feb 7 15:04:52 EST 2013


Oh, sorry, I misread who was the SP and who was the IdP. Nevermind! 
                                                                
--- Eric

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Eric Goodman
Sent: Thursday, February 07, 2013 12:00 PM
To: Shib Users
Subject: RE: IdP initiated SSO

Apologies if I'm misunderstanding, but if the SP is trying to simulate initiating a login request, then shouldn't they be sending an "samlp:AuthnRequest" and not a "samlp:Response"? I don't know that this would affect the 500 error, but in the most recent case where we had to do the same thing (work around an SP that can't do SP-initiated SSO) that's the request type they ended up sending us. 

--- Eric



More information about the users mailing list