Target parameter when invoking Shibv2 IdP Unsolicited SSO

[Nate Klingenstein]

Mike,

> Probably just my own "beginning bias" that a Target would have a '/'  
> in it somewhere, and not just be a string of letters and numbers.  
> The latter qualifies as a "relative url", but didn't match my biased  
> expectations for what I'd expect to see in a Target. Which prompted  
> the question.

I don't believe there are any restrictions on the content of  
RelayState other than that the IdP must reply faithfully with it and  
the SP must understand it once it's received, even in an IdP-initiated  
SSO situation.

Take care,
Nate.