Re: new to OpenSAML

[Jeff Hodges <Jeff.Hodges@Sun.COM>]

Scott Cantor wrote:
 >
 > You're also a little off. The 1.1 SSO profiles don't formally call out a
 > step that you can call an "authn request". The new 2.0 profile does, but 1.1
 > starts with the user at the source site, so authentication is pre-supposed.

This diagram may help illustrate how the v1.1 SSO works...

http://www.oasis-open.org/committees/download.php/7348/hodges-web-browser-profile-diagram-2004-06-19.pdf


Hope this helps,

JeffH