Setting default relaystate for the relying party

[Peter Schober]

* krrishv <krish.v at gmail.com> [2015-01-21 21:56]:
> Thanks Scott. Basically My application is a cloud application. I use
> internally II7 with Shibboleth SP. Which basically configured to release
> attributes to end cloud application. Hope that clears the question.
> Basically i am trying to have the user come into IIS and SP sends back to
> IDP for auth and once authenticated it is redirected to end cloud
> application. In this i have asked IIS to release few attributes to set their
> header for end application.

That sounds very insecure, with Shibboleth only securing the data up
to your SP. You can't just redirect the data elsewhere (your "cloud"
application) and expect the "cloud" application to be secured.

Cf. https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPOneMany

-peter