I'm reading about SAML Authentication and I've come across 2 different mechanisms. But I'm not seeing any proper explanation anywhere of which flow is used when.
If you're creating a SAML service provider application, then how do you decide which of these workflows to use in your SAML authentication flow?
- SAML Request is sent through redirect code 302 --> Browser places a GET request
- SAML Request is sent through HTTP Post through an HTML document/form
While designing an application, is this a purely subjective decision? Or does this depend upon something objective?