Help with relay state

[Johnson, Jacob (GE, Intelligent Platforms)]

Thanks Paul, I will do that.

If it turns out that my IdP is broken wrt to RelayState, would the cookie
implementation work?

Jake


On 8/12/13 1:00 PM, "Paul Hethmon" <paul.hethmon at clareitysecurity.com>
wrote:

>On 8/12/13 12:54 PM, "Johnson, Jacob (GE, Intelligent Platforms)"
><Jacob.Johnson at ge.com> wrote:
>
>>At this point, I'm assuming my IdP is responsible to remember this
>>parameter and feed it back to the SP.  However, I don't control my
>>company's IdP and don't think they will send this info back without some
>>change.  Please let me know if I'm wrong here, but I'm assuming I can't
>>use ss:mem in my environment for this reason.
>
>Actually, if they don't send back the RelayState value, they have a broken
>implementation. It's required by the spec.
>
>Get a copy of FF with the SAML Tracer plugin and do a login sequence. SAML
>Tracer will show the SAML messages sent both ways and you can look for the
>presence of the RelayState in the response the IdP sends.
>
>Paul
>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net