Signgo Ilex as IdP with Shibboleth SP

[Peter Schober]

* ranzorz <ran at sheinberg.net> [2015-01-28 16:31]:
> OK - how can we see the URL that they are arriving at the SP with? would
> Fiddler on the client browser machine enable us to see the URL? how would we
> go about identifying what's wrong with the URL though?

RelayState means the resource the subject wanted to access before the
SAML SP kicked in. In your case you're generating a request to the
SP's default session initiator with a 'target' parameter, so you're
effectively supplying the value for RelayState yourself here.

The IDP is only required to send back RelayState verbatim, i.e.,
exactly as recieved. You can check and compare yourself whether that's
the case.
-peter