What if more than one RelayState's send to the IDP?

Cantor, Scott cantor.2 at osu.edu
Thu Feb 19 09:55:40 EST 2015


On 2/19/15, 5:36 AM, "Surinaidu Majji" <pioneer.suri at gmail.com> wrote:


>
>Here my question is:
>Q1) What if i opened two tabs(same browser) with login page.We are 
>sending two "Relaystate" to display login page in two tabs, bu  if user 
>enters the credentials in the first tab and redirects to the idp, it will 
>give 'Relaystate' in the response which was sent earlier(secodn tab).

It's a limitation in the V2 design and won't be fixed. Multiple requests 
from one client will not function properly if they overlap.

-- Scott



More information about the users mailing list