Could you please clarify me these concepts?
- IDP-Initiated with SAML 2.0. What is the SAML response? Has the SAML Token included in it? After login in IDP and it is redirected to the vendor, what it is sending (response or token?)
- SP-Initiated with SAML 2.0. SP call IDP to validate user, is it using OAuth as protocol in this process? Could do it?
- OAuth 2.0/OpenID. What is the workflow of this solution? Same as SP-Initiated? Therefore what is the difference between OAuth2.0 and SP-Initiated?
Many Thanks