Re: How do IDP recognize a previously authenticated user?

David Waite wrote:

>
> The IDP just needs to recognize the user is authenticated when 
> processing the request, so it can either rely on the same session 
> tracking mechanisms as the SP, or alternatively use a browser-based 
> security mechanism (HTTP Plain or Digest auth, some custom protocol 
> for smart card auth, NTLM, etc.)
>
Thank you for your answer.
If I have understood, to deploy a SourceID SSO architecture in 
conjunction with some
previously deployed web sites, I have to deploy a new site (IDP) and, 
for each autenticating site,
I have to deploy a SP. SP1 has to share the same http session context 
and variables
with "PrevoiuslyWebSite1". I also have to implement an AccountHandler 
for each IDP or SP
with its authentication mechanism in order to access authentication 
information. I mantain
unchanged the services offered by prevoius implemented sites, even if 
they are implemented
in php or perl. I only have to change the access to authentication 
information.
Is it right?
I thank you very much for your support.

Best regards,

Antonio Bonavita