Forum Discussion
Dave_W
Nov 20, 2019Employee
Hello Luca, this depends. In this use case it does sound like APM would be the SP. You could have the APM be both the IdP and SP (or use an external IdP). Regarding your last question, no, typically SAML can be SP or IdP initiated. So they could go to the App (SP) first or the IdP first.
Here is some more info:
https://www.youtube.com/watch?v=WdRJZ5BnZug