we developed a managed package that includes visualforce with canvas app that displays a third app. the third app required SSO in order to login. I have installed my package on ED environment and configured the DE as the service provider. the owner of the third app configured his end as IDP and he can see the session. but As a result of that the sign request and other params no more passed to his end. What have we done wrong?