We are an ASP.NET website with 50,000 users. We have one company that wants to use SAML 2.0 to let its 30-or-so employees SSO into our site. I guess that makes their vendor the IdP and us the SP.
Is it really necessary to create a Global.asax file to load the configuration? Can't we create a page to SAML into (Assertion Consumer Service URL?) and have the load there?