Native SP + DS redirect target

Cantor, Scott cantor.2 at osu.edu
Wed Mar 21 22:20:51 GMT 2012


On 3/21/12 6:03 PM, "Quint Van Deman" <qvandeman at emergent360.com> wrote:

>The only trick is that the post authentication redirection (since
>introducing the DS) is dropping the path portion of the url.
>The browser gets forwarded to https://sso1.private.net/ instead of
>https://sso1.private.net/secure/index.php.
>If I manually append the path, SSO works fine, but I'm a bit stumped
>as to where the redirect target is getting mangled.

Track the target parameter and then the RelayState. Assuming default
settings, the relay state is tracked in memory with no cookies involved,
so that eliminates various potential problems and is a simple matter of
tracking that the relay state is properly preserved and sent to the IdP
and back.

It's not chopping the path, either, it's just losing the state. Then it
lands you at homeURL or in its absence the vhost root. If you set homeURL
explicitly, that will change where it defaults to.

-- Scott



More information about the users mailing list