target URL not changing if user re-types destination at IDP before login

Cantor, Scott cantor.2 at osu.edu
Wed Dec 17 21:25:17 EST 2014


On 12/17/14, 7:31 PM, "Flannery, Sean" <sean.flannery at jwt.com> wrote:


>
>Its like shibboleth is storing the 'target' from the first request and 
>not overwriting it when it intercepts a second request from this user.  
>Has anyone encountered this before?

a) you didn't specify how the SP is being told to manage RelayState.

b) I don't think there's any way this happens unless the IdP sends back 
the wrong RelayState anyway.

So, no, I think it's the IdP, not the SP. But you have the access to trace 
it and identify the RelayState in each case and whether it's being 
miscorrelated, and I don't.

-- Scott



More information about the users mailing list