Federation Security Services Guide › Identify WS-Federation Resource Partners at the Account Partner › Set Up Links to Initiate WS-Federation Single Sign-on › Initiate Single Sign-on at the Resource Partner

Initiate Single Sign-on at the Resource Partner

If a user starts at the Resource Partner to initiate single sign-on, typically the user goes to a site selection page at the Resource Partner to choose from a list of Account Partners where authentication takes place. The site selection page is in an unprotected realm.

The link on the site selection page points to the Single Sign-on Service at an AP and must contain the Provider ID of RP and optionally, other parameters, such as wct, which holds the value of the time in UTC format. After the link is selected, the user's browser is redirected to the Account Partner to get the assertion.