Thoughts/best practice around SP to IDP token passing

[Paul Hethmon]

On Aug 15, 2014, at 11:26 AM, Daniel Gay <daniel.gay at quentinsystems.com<mailto:daniel.gay at quentinsystems.com>> wrote:

It's step 5 that I'm unclear as to the best way to do that.  The token (well really, I'd like the whole URL) gets lost in the redirects, but I was hoping that the original URL would be sent to the IDP and that I'd somehow have that info available to my custom code.

If you control both sides, you could pass the value in the SAML RelayState. Otherwise, perhaps a domain cookie.

Paul

Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140815/0944f450/attachment-0001.html