Multiple Services on One SP

Paul Hethmon paul.hethmon at clareitysecurity.com
Tue Jan 22 10:53:34 EST 2013


Ok, that makes more sense. I think you could, but you would have to write
a custom resolver to do so. Just doing a quick check looks like the
complete SAML request message would be available at that level.

Paul

On 1/22/13 10:50 AM, "Michael A Grady" <mgrady at unicon.net> wrote:

>>
>>There's no way in the IdP code to over ride the relay state, it only
>>echoes back what it received.
>
>Not suggesting trying to override it, because apparently the SP in
>question ignores it anyways. What I'm wondering is if the attribute
>resolver can access the RelayState value that was already set (as a
>parameter on the URL invoking the Unsolicited endpoint), and then use
>that to "drive" creating a custom attribute with that value or at least
>some value based on what the RelayState value was.
>



More information about the users mailing list