Help with relay state

[Cantor, Scott]

On 8/12/13 2:57 PM, "Johnson, Jacob (GE, Intelligent Platforms)"
<Jacob.Johnson at ge.com> wrote:

>Thanks All, I think I get it now...  RelayState is used in both ss:mem and
>cookie scenarios.  In the cookie scenario it contains the ID of the cookie
>containing the URL.  In both cases the IdP should echo it back in an HTTP
>form field named "RelayState".  My IdP does not echo back, which indicates
>a broken SAML implementation.  Do I have that right?

Not returning RelayState is a fundamental violation of the binding
specification. Nobody is saying the IdP is broken, only you can determine
that. We're just saying it fits the symptoms.

-- Scott