Thoughts/best practice around SP to IDP token passing

Cantor, Scott cantor.2 at osu.edu
Fri Aug 15 15:27:40 EDT 2014


On Aug 15, 2014, at 3:04 PM, Daniel Gay <daniel.gay at quentinsystems.com>
wrote:
>
>I changed the relay state setting on my SP and can now see the requested
>URL passed as parameter to the IDP.  The IDP responds with a 302 though
>to the AuthnEngine servlet, without the relay state parameter.  If I can
>make an educated guess, the IDP must store the relay state somewhere for
>eventual sending back to the SP.  From my custom login handler, where can
>I get it?

I don't know that you can. You're not meant to, so it's not really a goal.

-- Scott



More information about the users mailing list