Default SP session creation in IDP

[Peter Schober]

* Peter Schober <peter.schober at univie.ac.at> [2013-11-09 15:16]:
> 1. Add a check to login.jsp to prevent users being able to
>    authenticate when directly accessing that page (because it cannot
>    work), e.g via <% if (loginContext == null) {%> <% } %>

Of course you could to other things in that conditional, such as
generating a Location header (i.e., redirect the HTTP User Agent) to
the IdP's endpoint for IdP-initiated logins, with all the required
parameters for the SP you want (as per the documentation).
-peter