Detail Flow Diagram

The following flow diagrams explain the detailed flow:

Flow 1: User access CI End User Portal (when CI act as SP)

In this flow when a user tries to access SP (which is CI) it gets redirected to IdP and authentication happens in IdP. After it is done, the SAML token is sent to CI and CI creates a login session for the user.

For more details about the flow, refer to SSO Configuration for Cross Identity.