Does ADFS 2.0 with WS-Federation support IdP-initiated SSO?

3
votes

Does ADFS 2.0 with WS-Federation support IdP-initiated SSO? and if yes, how? I could not find the answer on the internet yet and if yes, could you please help me with a sample?

I configured a trust relation between the ADFS 2.0 (IdP) and my RP using a metadata configuration. Everything works fine in SP initiated SSO but I don't know how to configure the IdP initiated one.

I'm opening this link https://[SOEMTHING]/adfs/ls/idpinitiatedsignon.aspx but it is showing an empty list with Signout button only.

What did I miss? is it configured through the RP-metadata file only?

1
single-sign-onadfs2.0ws-federation

1 Answers

4
votes

There's no such thing as IDP-initiated-SSO in the WS-Federation standard, but ADFS 2.0 allows for so-called "smart links" that achieve relatively similar behavior as described in: http://community.office365.com/en-us/w/sso/358-using-smart-links-or-idp-initiated-authentication-with-office-365.aspx. Your RP (e.g. O365) needs to support that too.