Signgo Ilex as IdP with Shibboleth SP

[Cantor, Scott]

> Agreed! but still in real life scenarios things are not perfect and
> workaround can be implemented.
> If you can think of one, I'd love to hear it.

Well, the only workaround would be to change the relayState setting in the SP to determine if it's immune in some cases and not others. With no setting, it sends the entire URL to the IdP. But if it's mangling something that's not a URL, it seems hard to imagine it wouldn't mangle something needing even more encoding to be safely handled.

-- Scott