Compiling SP code gives compilation errors.

[Cantor, Scott]

> My conclusion is based on the following log entry.
> shibd.log.2:2016-02-05 06:05:11 DEBUG Shibboleth.SSO.SAML2 [1]: *ACS
> returning via redirect to:
> *https%3A%2F%2Fhostname-name-not-
> exposed%3A5000%2FShibboleth.sso%2FSAML2%2FPOST

Only way that happens is if you've configured the SP to use the full URL as RelayState and the IdP has a bug and is molesting it by not understanding how to treat encoded URLs.

> I don't see any place between this and the actual redirect happening that
> there is a decode. I know the problem is with the IdP sending an encoded url
> as relay state. I am not saying the sp should be decoding but with the IdP
> configuration/code not under by control.

Nothing you do will fix that. Any of the relayState options in the SP will end up using data that needs to be encoded and then handled properly by the IdP so it gets returned correctly. Do NOT change the SP code. That is not maintainable for you. The correct answer is to report the bug and refuse to work with the broken IdP.

-- Scott