Google Generates Warning: Relay state exceeds 80 bytes, some application may not support this.

[Cantor, Scott]

On 10/18/13 10:59 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
>
>It means what it says, the SP set a RelayState value that is longer
>then 80 bytes (a limit from the SAML spec I'd need to dig up, but so
>could you). There's nothing you can do about it as (a) it comes from
>the SP and (b) the IdP must send it back unmodified.

The specific guidance is just that one is not meant to use RelayState to
directly expose the target URL. It would make binding-encoded URLs fully
unbounded in size, and it's just bad for privacy (not that Referer isn't
to begin with, but "do no harm").

Needless to say Google and privacy go together like chocolate and pickles.

-- Scott