target URL not changing if user re-types destination at IDP before login

[Flannery, Sean]

Hello,

I'm working on a site that uses shibboleth SP against a proprietary IDP, but I think the behavior we are seeing is coming from the SP and I'm wondering if any one has suggestions.

USE CASE:
* user enters a full url say   https://domain/hisapp  (URL 1) and our SP properly intercepts and routes to the IDP for login
* user changes before logging in, and types https://domain/herapp (URL 2) into browser.  SP intercepts again and routes to IDP
* but user is sent to  https://domain/hisapp (URL 1) after authentication rather than URL 2

So authentication works, but the user is routed to the original URL he typed, rather than the newer one he typed while looking at the IDP login screen.

Its like shibboleth is storing the 'target' from the first request and not overwriting it when it intercepts a second request from this user.  Has anyone encountered this before?

Our support staff claims we have a lot of users that are doing this, though it seems like an odd use case to me.  Is there a setting I could enable to refresh the 'target' via the second request (if that is the problem).  I've been looking at the  NativeSPSessionInitiator documentation but nothing is jumping out to me.

Any help would be appreciated.  Take care.

Sean
This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender.