# Guide to OpenIG
Chapter 6. Detailed Use Cases

Sidebar | Prev | Up | Next

## 6.4. Federation Gateway IDP Initiated SAML2 SSO

The figure below illustrates the Federation Gateway providing SAML2 endpoint features acting as a Service Provider in a IDP initiated single sign-on configuration.

[D]

1. User clicks the HR link on the company portal and is redirected to the company IDP for authentication.

2. IDP sends an AuthN Response to the HR application.

3. Federation Gateway receives the POST, validates the assertion, and makes the attributes available to the OpenIG login chain.

4. OpenIG login chain retrieves the user credentials and POSTs the login form to the myHR application.

5. HR application validates the credentials and redirects to the main page of the application.