HI All,

we are using ping identity provider for SSO . it would be great if you can answer some of my question :

1.)    For SAML SSO configurations, which SAML profiles and bindings will be used (e.g. SP-Initiated-SSO-Post-Post etc.)

2.)    Does SFDC integration needs any back-channel communication ? (e.g. Artifact resolution or other SOAP communication)

3.)   Need set of user attributes that  IdP need to send in an assertion to SFDC .

4.)  How sandbox SSO configuration is defined - Does it rely on PROD Federation setup or do we need to configure new dedicated Federation setup with each QA, Test, Dev sandbox .

5.) In identity provider side do we have to  set up IDP Role and SP role both for SSO outlook integration ?

Regards,

Neha