redirect after authentication by IdP

[Cantor, Scott]

On 1/17/14, 4:03 PM, "Qian, Yi" <yqian at ku.edu> wrote:
>
>Here is the problem, we enter the original URL in the browser, get
>redirect to KU shib IdP, successfully authenticated, we would like to
>redirect a different URL, something like entering xyz.com --> KU IdP -->
>xyz.com/product
>
>Can we do it by IdP, such as including redirect URL in the assertion?

RelayState is what dictates this, and the IdP does not control that, it
sends back what the SP sends it.

I don't even know what your SP is, and if it's not Shibboleth, then it's
not a question for this list. If it is, you can manipulate how RelayState
is used in many different ways that depend on how the SP is being used and
integrated into applications and resources.

In general, this is not something that should be hacked in some complex
way, you should be dealing with this using the web server or application.
If you want people accessing xyz.com to end up somewhere else, don't
authenticate access to xyz.com, make it a redirect to the place you want
to be, and protect only that location.

It's quite possible I don't understand at all what you're trying to do.

-- Scott