* User accesses a custom application for the first time
* Service Provider Security Filter checks if the security context is available
and redirects the user to IDP (Identity Provider) with a SAML SSO request
* IDP challenges the user with the authentication dialog and redirects the user to
Request Assertion Consumer Service (RACS) after the user has authenticated
* RACS validates the response from IDP, establishes a security context and redirects the user
to the original application endpoint
* Service Provider Security Filter enforces that a valid security context is available and lets the user
access the custom application.