Relay State parameter issue

Cantor, Scott cantor.2 at osu.edu
Fri Jan 16 16:23:03 EST 2015


> I am currently running Shibboleth 2.4.1 and I a question concerning relay
> state.  Using SAML tracer I see that I request from a Service Provider
> successfully navigates my browser to our IdP and has set the relay state
> parameter to '/'.  As well there are no cookies present (confirmed via http
> fox).  Now after authentication the browser is redirected back to the ACS of
> the service provider with a SAML response but no relay parameter.  Bad?

Yes, but I don't buy it. If we had a bug that big, it would have been noticed by now. I guess it's conceivable that there's some edge case involving a literal slash, but I can't really imagine that.

-- Scott



More information about the users mailing list