Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The <md:AssertionConsumerService> element is used to configure handlers that are responsible for " consuming " SAML assertions; that is, they process an assertion according to a profile, extract its contents, create a new user session, and typically produce a cookie to represent the session.

Tip

This is an advanced configuration feature. Most deployments can rely on the <SSO> shorthand element.

An ACS does most of the work of SSO for the SP and is the "receiving" half of the SSO message exchange started by a SessionInitiator. As a multi-protocol system, the SP itself is oblivious to specific SSO protocols; each ACS provides the implementation of a particular protocol.

...