<div dir="ltr">It probably is covered. We have an application where the users currently login to use it. In a nutshell, when they login to that application, we want to notifiy the IdP that they have logged in so when the application links to an outside SP and that SP initiates an SSO AuthnRequest to the IdP. The IdP knows that the user has signed on even though they haven't signed on using the IdP. I'm fairly sure that there needs to be some sort of back channel communication for the notification to be made.</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 31, 2014 at 12:31 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">> Another question. We have an application that uses tomcat container<br>
> security, realms, etc. When a user has logged in to the application they may<br>
> click a link that takes them to another service provider. That service provider<br>
> needs to do SSO to the IdP that we will be installing. Is there anyway for a<br>
> service provider that supports login to notify the IdP that the user has logged<br>
> in, or do we need to perform all logging in to use the IdP?<br>
<br>
</span>I'm not sure I understand the question. An authn request from an SP to the IdP is SAML, no more or less (modulo extensions in the message). I don't know what you're trying to do exactly, so I don't know whether whatever it is is something covered by the standard.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>