redirect after authentication by IdP

[Qian, Yi]

Thanks Scott

Please correct me for any errors :)

My understanding is that the RelayState is defined on SP side, but we are
IdP only

On 1/17/14 3:25 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 1/17/14, 4:03 PM, "Qian, Yi" <yqian at ku.edu> wrote:
>>
>>Here is the problem, we enter the original URL in the browser, get
>>redirect to KU shib IdP, successfully authenticated, we would like to
>>redirect a different URL, something like entering xyz.com --> KU IdP -->
>>xyz.com/product
>>
>>Can we do it by IdP, such as including redirect URL in the assertion?
>
>RelayState is what dictates this, and the IdP does not control that, it
>sends back what the SP sends it.
>
>I don't even know what your SP is, and if it's not Shibboleth, then it's
>not a question for this list. If it is, you can manipulate how RelayState
>is used in many different ways that depend on how the SP is being used and
>integrated into applications and resources.
>
>In general, this is not something that should be hacked in some complex
>way, you should be dealing with this using the web server or application.
>If you want people accessing xyz.com to end up somewhere else, don't
>authenticate access to xyz.com, make it a redirect to the place you want
>to be, and protect only that location.
>
>It's quite possible I don't understand at all what you're trying to do.
>
>-- Scott
>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net
>