Thoughts/best practice around SP to IDP token passing

[Paul Hethmon]

On Aug 15, 2014, at 3:04 PM, Daniel Gay <daniel.gay at quentinsystems.com<mailto:daniel.gay at quentinsystems.com>> wrote:

I changed the relay state setting on my SP and can now see the requested URL passed as parameter to the IDP.  The IDP responds with a 302 though to the AuthnEngine servlet, without the relay state parameter.  If I can make an educated guess, the IDP must store the relay state somewhere for eventual sending back to the SP.  From my custom login handler, where can I get it?


It's returned as a field of the SAML form that is posted to your SP. One field is the SAML Response, the other is RelayState.

Paul

Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140815/904173bc/attachment-0001.html