Help with relay state

Johnson, Jacob (GE, Intelligent Platforms) Jacob.Johnson at ge.com
Mon Aug 12 08:00:14 EDT 2013


I've setup a shibboleth SP on my application, which accepts SAML assertions from my companies federated IdP.  The authentication works as desired and the assertions validated.  However, after authentication I am not redirected where I expect.  The following illustrates my problem

Step 1: User visits Initial URL:  http://[Host DNS]/dwportal/index.jsp
Step 2: User is redirected to the corporate IdP login page URL:  http://[Corporate_SSO_URL]?SAMLRequest=xxxxxxx
Step 3: User authenticates
Step 4: IdP responds with a SAML assertion POST to my SP:  http://[Host_DNS]/login/SAML2/POST
Step 5: SP validates SAML Assertion and redirects user to: http://[Host_DNS]/

My problem is that step 5 redirects to a URL which is different than in Step 1.  I set relayState="Cookie" in the shibboleth.xml configuration file.  After that, I see a cookie that is created in step 1.

_shibstate_1376074421_1019=http%3A%2F%2F[HOST DNS]%2Fdwportal%2Findex.jsp;

The cookie contains the URL that I want to redirect to, but the app does not redirect as expected.

Jake



More information about the users mailing list