I was wondering if this could be extended to use SAML 2.0 authentication (as Domino 8.5.2 does not support it).

We are chasing a solution that will authenticate with SAML (http post/post, not get) and then provide single sign on (SSO) using LTPA.

It would seem likely that this may work, given that later versions of tomcat support SAML 2.0.

So the architecture would look very similar to the original diagram, only the user wold be re-directed to a third party to log on and then the third party would send a SAML token back to the tomcat server, then a ltpa token would be sent to the browser.

Sounds possible, any ideas.

Thanks

Damien

Thanks

Damien