Access SSO and SCIM Flow Over SAML
-
The user initiates a request from the browser using SSO URL provided by the Service Provider (SP). The SSO URL is SP application specific.
-
The SP recognizes that the user is not yet authenticated and redirects the user to the Identity Provider (IdP) for Single Sign-On (SSO) login.
-
The IdP authenticates the user and generates SAML assertions containing the user's identity and optionally attributes for provisioning and authorization.
-
The IdP sends the SAML assertions back to SP’s ACS URL.
-
The SP receives and processes the SAML assertions to validate their authenticity and extract the user's identity and attributes.
-
User redirected to desired application URL following successful validation.