CODEWITHSUNDEEP
authenticationsingle-sign-onsaml
Pallav Maheshwari
Pallav Maheshwari

Reputation: 17

SSO - SAML request

Is SAML request sent everytime a user tries to load a service provider page ? If not, how does it handles the case when in some cases authentication is required as when session times out or someone tries to load a page when not loggedin ?

Upvotes: 0

Views: 260

Answers (1)

ComponentSpace
ComponentSpace

Reputation: 1367

No. The analogy is would you require the user to login locally every time a user attempted to load a page? If the user doesn't have a local authentication session (eg authentication cookie), the SP performs SAML SSO to the IdP and uses information returned in the SAML assertion to automatically login the user and establish a local authentication session. If the authentication session times out, the SP can perform SAML SSO again.

Upvotes: 1

Related Questions