Recent Safari update breaks some SPs ?

[Tom Scavo]

On Wed, Oct 26, 2016 at 6:53 AM, Losen, Stephen C. (scl)
<scl at eservices.virginia.edu> wrote:
>
> Safari is definitely converting %3A to : and %2F to / in the URL query string.  My colleague installed the MacOS and Safari update and used the tracing tool in Safari.  The response from the Service Now SP (the redirect URL) has %3A and %2F and the subsequent request to the IDP has : and / instead. So Safari definitely modifies the redirect URL and this prevents the IDP from verifying the signature.

A possible workaround is to POST the AuthnRequest to the IdP's
HTTP-POST endpoint. Just a thought.

Tom