There are two options as below:
Option1:After authentication with IdP,users will automatically access PEGA
again with signed response.
Option2:After authentication with IdP,the response will be redirected to PingFed
service provider,and then redirect browser to target resource.
Please tell me which one is better and the merits and demerits between them.