Re: [saml-dev] Any 3 leg profile?

On 2/27/13 12:30 PM, "Will Hartung" <> wrote:
>
>The Application (AppA in this case) could do that. act as an ECP, but
>it can't pass a session to the browser once it's done.

Well, it may be able to if it's a proxy. That's one of the use cases
behind the original ECP work. But sessions don't tend to involve SAML
because they have not been in scope of the standard.

There's a spec for doing session transitioning between SPs that might have
relevance. Should be published in the repository, don't recall if it's
linked from the wiki.

-- Scott