Multiple Services on One SP

[Jason]

>>> Ok, that makes more sense. I think you could, but you would have to write
>>> a custom resolver to do so. Just doing a quick check looks like the
>>> complete SAML request message would be available at that level.

Thanks everyone for the replies--this is extremely helpful.  In this
particular case, I can only control the IdP.  If I were to pass in a
RelayState value as a parameter on the URL that invokes the
/SAML2/Unsolicited/SSO endpoint, would I be able to capture that
RelayState value using a scripted attribute?