Relaystate Problem

[Rainer Hoerbe]

Scott, thank you for directing my eyes to the right spot. (In addition I switched from Firebug to HTTPFox to get a better view on the original exchange).

The reason is that the IDP is broken. While the browser posted the cookie to the SP, the RelaySTate was ompletel missing from the POST form.

- Rainer


>> Both name and value are identical.
> 
> Then I have no idea, unless the SP response is broken in some way. It
> isn't consuming the state, for whatever reason.
> 
>> For my understanding: Doesn't <SessionInitiator relayState="cookie" ...>
>> specify to use the cookie to store the resource path in the cookie? It
>> looks very much like this:
>> Cookie: 
>> _shibstate_1350286969_c8e2=https%3A%2F%2Fpvpsaml2.portalverbund.at%2Fsecur
>> e%2Fecho.php
> 
> Yes. But the name will depend on the applicationId, so if that's off, it
> won't recover it. Since it's not apparently wrong, that shouldn't be a
> problem.
> 
> I don't know why else it could be failing. As a test, I'd probably go
> ahead and try the alternate relayState types particularly taking it out
> altogether and let it pass the URL as the state. Just as a test.
> 
> Also, I'd perhaps look and see what the response to the SP looks like in
> the HTML form it's posting. Is there anything unusual about the RelayState
> form input? More than one of them?
> 
> -- Scott