3.1.5.3.1 Protocol Activation

For a relying party, the protocol is triggered when a web browser requestor attempts to access a WS resource that requires users to be authenticated, and an Authentication Context does not exist for the users.