sso_sp.yml

    firewalls:
        dev:
            pattern:  ^/(_(profiler|wdt)|css|images|js)/
            security: false

        main:
            pattern: ^/
            security: true
            sso:
                require_previous_session: false
                provider:                 main
                check_path:               /otp/validate/

                sso_scheme:      http
                sso_host:         idp_name.com
                sso_otp_scheme:   http
                sso_otp_host:     sp_name.com
                sso_failure_path: /login
                sso_path:         /sso/login/
                sso_service:      sp_name

                failure_path:     http://sp_name.com/login

            logout:
                invalidate_session: true
                path:               /logout
                target:             http://idp_name.com/sso/logout?service=sp_name