AD FS and RelayState

Robert Lowe robertmlowe at
Thu Aug 20 09:55:08 EDT 2015

One of our clients uses AD FS as their IdP, and is claiming that AD FS
requires that RelayState be sent in a specific format, something like this:

They are citing this blog post as an example:

If true, this would obviously not be compliant with the spec. I'm
skeptical, as the sources seem to be referring to IdP-initiated SSO only.

I guess my questions to the list are:

   1. Can anyone confirm or refute the claim; and
   2. If this is indeed required, is there any way to make the Shibboleth
   SP generate RelayState in the appropriate format?

Best regards,

Robert Lowe
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list