Questions starting to implement Shibboleth IDP

[Cantor, Scott]

> Another question.  We have an application that uses tomcat container
> security, realms, etc.  When a user has logged in to the application they may
> click a link that takes them to another service provider.  That service provider
> needs to do SSO to the IdP that we will be installing.  Is there anyway for a
> service provider that supports login to notify the IdP that the user has logged
> in, or do we need to perform all logging in to use the IdP?

I'm not sure I understand the question. An authn request from an SP to the IdP is SAML, no more or less (modulo extensions in the message). I don't know what you're trying to do exactly, so I don't know whether whatever it is is something covered by the standard.

-- Scott