Relay State parameter issue
Cantor, Scott
cantor.2 at osu.edu
Fri Jan 16 16:23:03 EST 2015
> I am currently running Shibboleth 2.4.1 and I a question concerning relay
> state. Using SAML tracer I see that I request from a Service Provider
> successfully navigates my browser to our IdP and has set the relay state
> parameter to '/'. As well there are no cookies present (confirmed via http
> fox). Now after authentication the browser is redirected back to the ACS of
> the service provider with a SAML response but no relay parameter. Bad?
Yes, but I don't buy it. If we had a bug that big, it would have been noticed by now. I guess it's conceivable that there's some edge case involving a literal slash, but I can't really imagine that.
-- Scott
More information about the users
mailing list