relaystate urlencoded

Cantor, Scott cantor.2 at osu.edu
Thu Mar 5 13:20:18 EST 2015


On 3/5/15, 1:12 PM, "samir el otmani" <elotmani.samir at gmail.com> wrote:

>if i change the relaystate="ss:mem" into "cookie" in shibboleth2.xml , it 
>will rely only on the cookie ? or the problem will always occure

There are no supported mechanisms in which the relay state won't end up 
broken by such a bug.

Your only recourse would be to switch to, say, the artifact binding so 
that the parameter ends up on the URL instead of a form submission, and 
then in theory I guess you could build a rewrite rule to try and fix it.

-- Scott



More information about the users mailing list