IdP initiated SSO

Eric Goodman Eric.Goodman at
Thu Feb 7 15:04:52 EST 2013

Oh, sorry, I misread who was the SP and who was the IdP. Nevermind! 
--- Eric

From: users-bounces at [mailto:users-bounces at] On Behalf Of Eric Goodman
Sent: Thursday, February 07, 2013 12:00 PM
To: Shib Users
Subject: RE: IdP initiated SSO

Apologies if I'm misunderstanding, but if the SP is trying to simulate initiating a login request, then shouldn't they be sending an "samlp:AuthnRequest" and not a "samlp:Response"? I don't know that this would affect the 500 error, but in the most recent case where we had to do the same thing (work around an SP that can't do SP-initiated SSO) that's the request type they ended up sending us. 

--- Eric

More information about the users mailing list