On 5/9/06, Costello, Roger L. <> wrote:
>
> How would the airline service know that the user has clicked on the
> link? The web page that contains the link is in the user's browser;
> the airline service has no way of knowing whether or not the user will
> follow the link.
Clicking on the link initiates an AuthnRequest to the airline's SSO
service. The basic idea goes all the way back to the IdP-first
scenario of SAML 1.1.
Is there something I'm missing here? Is there some reason why the SP
must initiate the request? If not, this is a piece of cake. :-)
Tom
