SP RelayState not used with mod_jk even if returned by the IdP

Cantor, Scott cantor.2 at osu.edu
Fri Nov 27 11:36:15 EST 2015


On 11/27/15, 4:18 AM, "users on behalf of gael.thiabaud at fr.michelin.com" <users-bounces at shibboleth.net on behalf of gael.thiabaud at fr.michelin.com> wrote:


>2. If in Apache I use a Location with a mod_jk, the user retrieve a 404 because  the value of the RelayState is not used and the resource request is something like:
> /Shibboleth.sso/SAML2/POST in place of something like /web/targetedRessources

I have no idea what that means. The ACS location is always accessed first regardless.


>SP RelayState not used with mod_jk even if returned by the IdP

mod_jk has nothing to do with this. The SP uses the relay state to control the final redirect after the ACS location. Just trace the traffic and see what the final step is.

Either an error is produced, or it redirects to the RelayState recovered value or it redirects to homeURL (or / if none is set). Those are the only possibilities.

-- Scott



More information about the users mailing list