How to set relayState

[Cantor, Scott]

On 7/16/12 1:53 PM, "Rob Whitener" <rob.whitener at audaxhealth.com> wrote:
>
>I am a little confused over the relayState parameter and specifically how
>it gets set (or how I can get a value into relayState in my SP).  We are
>working with a partner who, for reasons we still can't fathom, insist on
>using relayState as a method of
> partitioning out the organzations their customers belong to (rather than
>just putting it into an attribute).  If I wan't a particular URL to be in
>the relaystate, do I have to set up applicationOverrides to accomplish
>that?

The only thing the SP allows relay state to be is a token that it will use
to identify the URL to send the browser after login. That's absolutely it.
Assuming you want to control that URL, you simply protect that URL with a
requireSession property and access it, or you generate a redirect to a
SessionInitiator (/Shibboleth.sso/Login) and set target to the URL you
want.

Or you can manufacture an IdP-initiated SSO scenario at the IdP and that
will document how RelayState can get set to a URL.

But in all cases, all you're doing is controlling the URL to end up at.
You cannot separate it from that function.

-- Scott