Signgo Ilex as IdP with Shibboleth SP

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2015-01-28 16:46]:
> On 1/28/15, 3:39 PM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
> >RelayState means the resource the subject wanted to access before the
> >SAML SP kicked in. In your case you're generating a request to the
> >SP's default session initiator with a 'target' parameter, so you're
> >effectively supplying the value for RelayState yourself here.
> 
> Not exactly. The target parameter is turned into the RelayState value, 
> using whatever the relayState setting is set to. Just passing target as a 
> URL won't in general cause the RelayState to be a URL itself unless the 
> relayState setting isn't actually set.

Yeah, my "RelayState means the resource" should have been written as
"RelayState *references* the resource", allowing for the common case
of RelayState only making sense to the SP.
-peter