Android Application Question

[Cantor, Scott]

On 1/4/17, 2:56 PM, "users on behalf of Andrew Watson" <users-bounces at shibboleth.net on behalf of andrew.watson at makeandbuild.com> wrote:

> That's exactly what I was thinking.  Since I have more control over the SP than the IdP I was thinking of doing that redirect
> there, though.

That is in effect just a gateway out of SAML into something else, yes.

> at the end of step 6 we'd issue another 302 to the Intent of the Android or iOS app to get them back into the native
> application...

You certainly can, but the point is that without the support of their toolkit, you may have issues with the user experience if you're getting the platform browser involved.

But there's not just the AppAuth thing, there are still other changes they've made to provide components you can use in place of the platform browser itself to handle that part, from the looks of it.

-- Scott