Native SP - SessionInitiator - target parameter

[Cantor, Scott]

On 3/30/16, 4:42 PM, "users on behalf of Waldbieser, Carl" <users-bounces at shibboleth.net on behalf of waldbiec at lafayette.edu> wrote:


>
>My interpretation is that when your browser establishes its initial session with the SP, the SP will somehow record the URL you are supposed to be redirected to after you successfully authenticate with some IdP.  So the flow would be something like:
>
>  1) Visit SP.  Initiate session.
>  2) Be sent to IdP to authenticate.
>  3) Return to SP, SP verifies that you were authenticated.
>  4) SP now redirects you to the URL specified by the target parameter.
>
>Is this even close to correct?  Or am I totally misreading this?  If so, could someone explain what this parameter does do?

Yes, that's correct. If you got all that, you weren't confused I guess.

The SessionInitiator is a dedicated endpoint. If you access that endpoint to start a session, the SP can't do (4) unless you tell it what URL to use. If you don't, you'll end up at a default location.

-- Scott