Hi,

I need to setup an intranet site which will not hold any user accounts and will instead use salesforce as the identity provider despite the login actually being instigated from the intranet(service provider) site.

Follow-on question:

Following the authentication we need to communicate with the salesforce api using the credentials /token from the initial login.

Is it possible to work in this way and has anyone got any experience of doing something along these lines or is there a better way?

All help and comments very much appreciated!