target URL not changing if user re-types destination at IDP before login
Cantor, Scott
cantor.2 at osu.edu
Wed Dec 17 21:25:17 EST 2014
On 12/17/14, 7:31 PM, "Flannery, Sean" <sean.flannery at jwt.com> wrote:
>
>Its like shibboleth is storing the 'target' from the first request and
>not overwriting it when it intercepts a second request from this user.
>Has anyone encountered this before?
a) you didn't specify how the SP is being told to manage RelayState.
b) I don't think there's any way this happens unless the IdP sends back
the wrong RelayState anyway.
So, no, I think it's the IdP, not the SP. But you have the access to trace
it and identify the RelayState in each case and whether it's being
miscorrelated, and I don't.
-- Scott
More information about the users
mailing list