Re: [saml-dev] Sessions and SSO.

[Scott Cantor <cantor.2@osu.edu>]

Giuseppe Sarno wrote:
> In few words SAML is not, actually, really, facilitating SSO. SSO is 
> actually facilitated by some other mean (session management between user 
> and IDP).
> 
> Is this correct ? Am I missing something ?

Yes, that's correct. The SSO profile is more accurately described as an 
HTTP authentication profile of SAML. SSO is out of scope except insofar 
as specific processing rules will occasionally preclude SSO (ForceAuthn).

-- Scott