Relay State parameter issue

[Brent Putman]

On 1/16/15 4:23 PM, Cantor, Scott wrote:
>> I am currently running Shibboleth 2.4.1 and I a question concerning relay
>> state.  Using SAML tracer I see that I request from a Service Provider
>> successfully navigates my browser to our IdP and has set the relay state
>> parameter to '/'.  As well there are no cookies present (confirmed via http
>> fox).  Now after authentication the browser is redirected back to the ACS of
>> the service provider with a SAML response but no relay parameter.  Bad?
> Yes, but I don't buy it. If we had a bug that big, it would have been noticed by now. I guess it's conceivable that there's some edge case involving a literal slash, but I can't really imagine that.

Yeah, me either.  I can look, but I don't recall any special handling of
RelayState.  We just pull it in as a String and it gets sent back out
unmolested, as far as I know.