Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It only takes a minute to sign up.
Sign up to join this community
I understand that "Delegated Authentication" (DA) is a unique SSO option specific to the SFDC platform.
Can we think about DA as non-SAML SP or IdP initiated SSO?
Could DA ever be considered "Service Provider" (SP) or "Identify Provider" (IdP) initiated SSO, or do these terms imply SAML/Federated SSO only?
SP and IdP are really SAML-based definitions, but if you wanted to give such a definition to DA, it would be a SP SSO; the user starts from Salesforce, the SP, and presents their credentials through DA to the IdP to complete the login process. However, generally speaking, you wouldn't call DA SAML (which is the Security Assertion Markup Language, a specific protocol for SSO technology that uses certificates and XML to pass authentication tokens).
