Shibboleth Authentication request flow

[Sathish Anickode]

I would like to understand how the authentication request flows between the user's browser, SP and IdP.

A user accesses a resource on a SP for the first time and since there is no associated authenticated session, a SAML request is sent to the IdP to authenticate the user. Since the user does not have an associated session on the IdP, does the IdP send back a SAML response requesting the user to be redirected to the login page? Can you please clarify how this interaction works?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141218/e8490ade/attachment.html