Re: [saml-dev] Sessions and SSO.
Giuseppe Sarno wrote: > In few words SAML is not, actually, really, facilitating SSO. SSO is > actually facilitated by some other mean (session management between user > and IDP). > > Is this correct ? Am I missing something ? Yes, that's correct. The SSO profile is more accurately described as an HTTP authentication profile of SAML. SSO is out of scope except insofar as specific processing rules will occasionally preclude SSO (ForceAuthn). -- Scott