Best way to configure Shib SP on IIS with endpoint to redirect to after receiving IdP-initiated assertion?

Peter Schober peter.schober at univie.ac.at
Wed Dec 10 16:33:25 EST 2014


* Andrew Webb <andrew.webb at statpro.com> [2014-12-10 22:20]:
> What is the best / most approved-of way to configure Shib SP (on IIS) with
> the host website's endpoint to redirect to, after Shib SP has received and
> processed a valid assertion via IdP-initiated SSO?

If RelayState is set from the IDP the SP will redirect there.
Otherwise the SP can set homeURL, see
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplication#NativeSPApplication-Attributes
With both absent the user agent will end up at / on the vhost.
No idea whether that answers your question.
-peter


More information about the users mailing list