...
Applications can also request that a session be created on demand by redirecting a user to a local URL bound to a <SessionInitiator>. This lazy session initiation should be used carefully to avoid unintended access being granted. SWITCH maintains a demonstration site with excellent examples and instructions for use of lazy sessions.
...