Hub and Spoke: Possible to do SP initiated SSO?

[Cantor, Scott]

On 6/18/13 3:21 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>Subject says it all...  Can I do SP initiated SSO on a hub and spoke fed?

As Peter says, it's out of scope. You're talking about a SAML specified
behavior, but SAML doesn't know what hubs are, it knows the SP and the IdP.

So the answer really depends on the relationship between the H&S
"abstraction" and the "real" SP and IdP involved. Which is
federation-specific.

The answer will be "yes", but it might mean that to you, the IdP is the
hub, not a spoke, and you're not allowed to know any spokes. In other
cases, that doesn't fly and the hub virtually emulates a bunch of spokes.

-- Scott