Thoughts/best practice around SP to IDP token passing

[Daniel Gay]

Ok, thanks for the info.  Sounds like my best bet is to re-think the
feature.

Dan


On Fri, Aug 15, 2014 at 3:27 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On Aug 15, 2014, at 3:04 PM, Daniel Gay <daniel.gay at quentinsystems.com>
> wrote:
> >
> >I changed the relay state setting on my SP and can now see the requested
> >URL passed as parameter to the IDP.  The IDP responds with a 302 though
> >to the AuthnEngine servlet, without the relay state parameter.  If I can
> >make an educated guess, the IDP must store the relay state somewhere for
> >eventual sending back to the SP.  From my custom login handler, where can
> >I get it?
>
> I don't know that you can. You're not meant to, so it's not really a goal.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Daniel Gay
Quentin Systems LLC
571-249-4783
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140815/63f7411f/attachment.html