SAML Flow for SaaS Application

You can implement SAML flows in two modes. Both modes are supported by Safous.

• A Service Provider Initiated (SP-initiated) sign-in describes the SAML sign-in flow initiated by the service provider. This is typically triggered when the end user tries to access a resource or sign in directly on the service provider side (for example, when the browser tries to access a protected resource on the service provider side).

• An Identity Provider Initiated (IdP-initiated) sign-in describes the SAML sign-in flow initiated by the identity provider. In this flow, the IdP initiates a SAML Response that is redirected to the service provider to assert the user's identity.