Getting the SP secured URL in IDP login

[Nate Klingenstein]

Aravindhan,

> I need the URL of SP which redirects to the IDP login page. (The secured URL
> which is configured in shib.conf and the parameters which is appended with
> the secured URL.). 

This is generally not information that is available to the IdP in Shibboleth deployments.  The SP deliberately conceals the destination resource where possible in order to protect users’ privacy.  You’ll need to explicitly set the RelayState to something that the IdP can read, which typically means setting it to something anyone can read by changing the relayState setting in the SP.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO

You’re obliged to send it back unchanged, but I think what you’d like to do is fine so long as you know that presuming that the SP’s RelayState will be available to you is borderline custom implementation.  So is everything else you’re working on, it sounds like, so maybe that’s fine.

Hope this helps,
Nate.