target URL not changing if user re-types destination at IDP before login

[Flannery, Sean]

Thank you- that was the problem.  I traced the RelayState and sure enough the IDP was always replying with the value from the first http request, not the latest one so, yes, it is a problem with the IDP.

I appreciate the guidance on where to look.

Sean

________________________________________
From: users-bounces at shibboleth.net <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Wednesday, December 17, 2014 8:25 PM
To: Shib Users
Subject: Re: target URL not changing if user re-types destination at IDP        before login

On 12/17/14, 7:31 PM, "Flannery, Sean" <sean.flannery at jwt.com> wrote:


>
>Its like shibboleth is storing the 'target' from the first request and
>not overwriting it when it intercepts a second request from this user.
>Has anyone encountered this before?

a) you didn't specify how the SP is being told to manage RelayState.

b) I don't think there's any way this happens unless the IdP sends back
the wrong RelayState anyway.

So, no, I think it's the IdP, not the SP. But you have the access to trace
it and identify the RelayState in each case and whether it's being
miscorrelated, and I don't.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net