Re: [saml-dev] SAML Authentication doubt

[Tom Scavo <trscavo@gmail.com>]

On Sun, Mar 16, 2014 at 7:42 AM, Phalguni Mukherjee
<phalgunimukherjee1007@gmail.com> wrote:
> I understood that when a user tries to access SP, if assertion is not
> present he is redirected to IDP for authentication, but in the same browser
> if I login into IDP first and than try to access SP, I get access to my SP
> for the same user, not able to understand what information is actually
> shared between this two domain in the browser, is it happening through some
> cookie, or as usual a call is going to IDP from SP and coming back with the
> assertion of logged in user?

Have you read the Technical Overview document?

https://wiki.oasis-open.org/security/Saml2TechOverview

Or Wikipedia?

http://en.wikipedia.org/wiki/SAML
http://en.wikipedia.org/wiki/SAML_2.0

Hope this helps,

Tom