Relaystate Problem

[Cantor, Scott]

On 10/15/12 11:49 AM, "Rainer Hoerbe" <rainer at hoerbe.at> wrote:
>
>How could I find out more? In the log I can see only the redirect to the
>root context:
>DEBUG Shibboleth.SSO.SAML2 [8]: ACS returning via redirect to:
> https://storksaml2.portalverbund.at/

native.log reports on what app ID every request is mapped to.

>Not likely. The Set-Cookie from the initial SP response and the
>Cookie-header from the POST to the SP's ACS show identical values.
>Also,how would it be possible that the IDP interferes with the _shibstate
>cookie? It is not in the IDP's domain.

The cookie value is not the relay state, the cookie *name* is.

-- Scott