I am writing a Java App that will integrate with Salesforce using OAUTH + REST. In normal circumstances without any single sign on everything is cool.
But the same app might be used to work with Salesforce orgs, where users are logging in to their machines + Salesforce via Active Directory credentials.
In such circumstances, will user be ever directed to Salesforce login screen ? Or they will be always taken to authorisation page (i.e. "Approve/Deny") directly ?