Hi All, for our project we are trying to achieve a scenario like this:

1. We have GSuite as our SAML Identity Provider

2. In our Salesforce commerce cloud(SFCC) site, we will have a G-Suite SSO option. But as SFCC does not support to be SAML service provider, we need a middleware.

3. We plan to use Salesforce identity as our SAML Service Provider (middleware).

Thus when user click on SSO option, SFCC will connect to Salesforce identity and initiate the SSO process (SP-Initited flow)

To achieve this,

4. First we have created a new SAML single sign-on setting to configure Salesforce identity(SI) as our Service Provider (we used identity providers values from G-Suite) : https://help.salesforce.com/articleView?id=sso_saml.htm&type=5

We checked through SAML assertion validator for the [SI - GSuite] flow and its working.

5. Next we created a connected app with enabling OAuth. We also enabled SAML for this connected app and provided the SI service provider information (created at step4)

Now, we are trying to understand how we can connect from external SFCC to this connected app so that we can inititae the SP-Initited SSO flow.

Could not find a clear documentation on this. Has anyone implemented similar flow? am I missing some critical element in the flow? Thanks for your feedback or any input .