Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Sign In] IDP-initiated sign in #14

Open
timcappalli opened this issue Sep 27, 2021 · 0 comments
Open

[Sign In] IDP-initiated sign in #14

timcappalli opened this issue Sep 27, 2021 · 0 comments
Labels
link decoration requires link decoration in the flow

Comments

@timcappalli
Copy link
Member

The details of the flow vary depending on protocol (OIDC has an extra full redirect round trip while SAML is effectively just one x-site navigation). But typically a user with a currently authenticated session (which likely maybe was established via SSO itself) is presented with a portal-like page with links to applications they can access. Navigating to one of those applications kicks off the IDP initiated SSO flow that ultimately delivers a SSO token to the RP application and the user is, from their perspective anyway, signed in seamlessly. I don’t think IDP-init uses browser features any more or differently than the SP-init variants (1st party samesite none/lax cookies and various things that look like link decoration). But it doesn’t fit the WebID model (last I’ve seen of it anyway) where the UX assumes things start on an RP site.

Brian Campbell

@hlflanagan hlflanagan added the link decoration requires link decoration in the flow label Oct 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
link decoration requires link decoration in the flow
Projects
None yet
Development

No branches or pull requests

2 participants