OpenAthens SP to Shibboleth (using OA Federation): Deep Links

[Cantor, Scott]

> > For relayState, we're using "ss:db" (we recently switched from "ss:mem").
> Could this have anything to do with it?
> 
> Yes, this is almost certainly it.  I think the database identifiers contain
> different characters than the in-memory identifiers, so some software will
> [inappropriately] notice the difference.

I haven't read this thread, but using ss:name just means "generate a short token and store the underlying URL against that token as a key in the named storage service". Whether it's memory or database is irrelevant to what appears in RelayState on the wire.

-- Scott