Forums, Documentation & Knowledge Base - ComponentSpace

SP receiving a Request in SSO


https://componentspace.com/forums/Topic10144.aspx

By jgarcia - 7/18/2019

Hello,

I am working in a SAML project, implementing SSO to a company' website. We are working in the Service Provider part.
I have been talking with the Identity Provider part and they told me that we (as SP) are going to receive a <Request> when the SSO occurs. But I though that, in SSO, the SP always is going to receive a <Response> (not a Request).
Is there any situation (in SSO) that the Service Provider receive a SSO Request?

Thanks,
Jorge
By ComponentSpace - 7/19/2019

No. You don't return anything to the IdP.
The SAML response will include user identity information (eg email address) supplied by the IdP. You use this information to automatically login the user at the SP.
I suggest taking a look at our SAML Primer for an overview of how SAML SSO works.
https://www.componentspace.com/Forums/9355/SAML-Primer
I also suggest taking a look at our ExampleServiceProvider project which demonstrates supporting SSO as the SP. Its SAML/AssertionConsumerService.aspx page shows how to call the SAMLServiceProvider.ReceiveSSO API to receive and process the SAML response. It then logs the user in locally although exactly how you do this is dependent on your application.
The Examples Guide includes a walk through of the ExampleServiceProvider.
https://www.componentspace.com/Forums/9351/Examples-Guide