Notes authentication without nab entry
<p>Currently we are evaluating a SAML solution as a corporate user authentication system.</p>

<p>The goal is to have only SAML as the main system without any redundancy of user data throughout different platforms.</p>

<p>Even if SAML authenticates the user how can the domino server create a session without mapping it to a user in the nab.</p>

<p>Is it somehow possible to have domino session without having the actual entry in the NAB?</p>

<p>And is it possible to retrieve group membership from SAML without having the actual group document in the nab?</p>

<p>Even if all of that works is it still possible to use these users and groups in the ACL and in readers and author fields?</p>