Using Shibboleth IDP as a SAML proxy and handling unsolicited SSO

[Cantor, Scott]

In other words:

SP = SP
IdP = Shibboleth
PIdP = IdP used via proxying by Shibboleth

PidP -> IdP -> SP = No
SP -> IdP -> PidP -> IdP -> SP = Yes (standard SSO)
IdP -> PidP -> IdP -> SP = Yes (unsolicited SSO)

-- Scott