Unsolicited (idp-initiated) Login?

[Cantor, Scott]

On 12/3/14, 9:29 PM, "Jason Walton" <jwalton at outbrain.com> wrote:
>
>I'm trying to work with a service that requires IDP initiated, also 
>called "unsolicited" login. There appears to be a provision in Shibboleth 
>for this via a custom crafted URL - but is there anything beyond this? 
>It's unclear to me how to deploy this to users without developing my own 
>full-featured "App Portal" ala Okta or OneLogin.

I don't think "link on a page" requires an app portal, but your real 
problem is that your users will just bookmark or reenter the app URL and 
go direct. No portal fixes that.

>Can someone shed some light on this for me? Or is there another open 
>source project somewhere that already exists to help implement a SAML 
>authenticated app portal or link-list for end users?

I think you may be overthinking this.

-- Scott