Unsolicited SSO handler for OIDC?

[Cantor, Scott]

> Is there a way to send a user to the Shibboleth IdP for login
> and  afterwards to an OpenID Connect RP?

No, because the "standard" request format in OIDC is just a vanilla redirect anyway, so the only factor that would distguingish one would be whether a RP notices by means of a mechanism intended to prevent it to begin with.

Among some odd reasons that had more to do with the astoundingly weird way vendors viewed SSO at the turn of the century, the main reason it exists for SAML is that the request message is XML and heavily encoded, not a simple redirect.

-- Scott