title: Can a private IdP make an SSO request to a public SP
body: <p>Ok, so my system is a SAML2 SP. We have tested it on SSOCircle (public saml idp test harness) and it works.</p>
  
  <p>Now we're trying to set it up with a customer (who is an IdP). My question is, if we're doing an IdP Initiated SSO - does the IdP need to be visible to the SP? (the idp is not accessible via web) Or does it not matter, so long as the IdP can post to the SP? (The SP is publicly visible).</p>
  
  <p>My assumption is it doesn't. Correct?</p>