GEANT / simplesamlphp-module-selfregister

SimpleSAMLphp Selfregister Module
MIT License
10 stars 14 forks source link

Create SSO session after completing registration #15

Open peter- opened 6 years ago

peter- commented 6 years ago

Discussed and requested several times in the past, e.g. in this thread:

After completing the registration process selfregister should create a session so that one can continue on to an SP without having to authenticate again, possibly seconds after having entered all the registration information, including typing the password twice.

A further enhancement may be to "return" the subject's browser to where they came from, if known: I.e., the flow may have started with a SAML 2.0 authentication request to the IDP+selfregister. On the login page the subject would then chose to create a new account, and after completing the registration, the IDP would send the subject to to the SP with the SAML response, if the was still known. (Of course registration may only be completed days later, or from another browser, so the state from the authn request may be gone.)