Can the IdP decide where to redirect browser after login?
SAMUELE RILLI
samuele.rilli at unicam.it
Mon Dec 19 10:30:22 EST 2016
>
> Or are you asking whether the IDP can overrule/override what the SP
> sent?
> To the latter: If the SP sends a RelayState to the IDP then the IDP
> must return that value to the SP verbatim, it's not allowed to change
> it. <users-unsubscribe at shibboleth.net>
That's what i mean.
Yes, currently the SP uses RelayStatus to decide where to redirect user,
and it works.
But I understand there's no way for the IdP to override it.
Thanks for the clarification.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161219/c6b52135/attachment-0001.html>
More information about the users
mailing list