Unsolicited SSO handler for OIDC?

[Henri Mikkonen]

Hi Lukas,

On 20.11.2024 9.33, Lukas Hämmerle via users wrote:
> 
> Well, it's also quite useful for our use case in which users are sent 
> users to some page e.g. to add some attributes to their account and then 
> redirect them via the IdP (which verifies providerId and target 
> arguments) back to the login page and then after successful 
> authentication immediately to the service they wanted to access. This 
> works even if the user already had a session on the service (where e.g. 
> some required attribute was missing).
> 
> Something similar is probably not that easy to implement with OIDC.

For me it sounds like the "closest match" (even though it's quite 
different) in the OIDC-world would be the sequence specified at the 
section 4 of the OIDC core [1] ("Initiating Login from a Third Party"). 
Anyway, the login initiation endpoint is an RP feature and probably not 
implemented by many of them.

BR,
Henri.

https://openid.net/specs/openid-connect-core-1_0.html#ThirdPartyInitiatedLogin