Help with relay state

[Paul Hethmon]

On 8/12/13 12:54 PM, "Johnson, Jacob (GE, Intelligent Platforms)"
<Jacob.Johnson at ge.com> wrote:

>At this point, I'm assuming my IdP is responsible to remember this
>parameter and feed it back to the SP.  However, I don't control my
>company's IdP and don't think they will send this info back without some
>change.  Please let me know if I'm wrong here, but I'm assuming I can't
>use ss:mem in my environment for this reason.

Actually, if they don't send back the RelayState value, they have a broken
implementation. It's required by the spec.

Get a copy of FF with the SAML Tracer plugin and do a login sequence. SAML
Tracer will show the SAML messages sent both ways and you can look for the
presence of the RelayState in the response the IdP sends.

Paul