How to set relayState

[Cantor, Scott]

On 7/16/12 4:03 PM, "Rob Whitener" <rob.whitener at audaxhealth.com> wrote:
>
>The approach we are going with is having a url scheme like
>/partner/bigOrg/smallOrg, where /partner/bigOrg/ is the protected
>resource  so that we can give BigOrg, the /partner/bigOrg/smallOrg urls
>for each of their small orgs (for SP initiated SSO).  My hope was that
>the full URL gets picked up by the SP and put into relayState and then
>the browser redirects back to that full URL at the end of the flow.

If you want it to, yes. But that doesn't matter because you don't see any
relay state information, the SP does.

>What I have noticed is the browser is redirected to /partner/bigOrg,
>which isn't really what I wanted, but there is a cookie named
>_shibstate_**** that has the URL I want in it.

That isn't possible. Using "cookie" for relayState will result in the URL
being stored off in the shibstate cookie, and then that's where it will
redirect you after the POST. You can easily verify that with a browser
plugin like LiveHeaders.

-- Scott