Book: Security Architecture Revision: n_1415923_security-architecture_version_6.4_edition_1.0_release_0-revision_1 Section: Browser-Based SSO Using SAML Issue description: There is a sentence starting with "When a user attempts to log into one of the service providers, ...", but the user doesn't try to "log into" the service providers, but (s)he wants to "access" them. If the user is not yet authenticated when accessing the service provider then (s)he is redirected to an identity provider. Suggestions for improvement: Replace the sentence with sth like "When an unauthenticated user attempts to access one of the service providers, ..."
Verified in n_1415923_security-architecture_version_6.4_edition_1.0_release_0-revision_6701121