Redirect after authentication not working

Peter Schober peter.schober at univie.ac.at
Fri Dec 15 04:45:36 EST 2017


* deeptiatsycode <deepti at ideabridge.in> [2017-12-15 09:22]:
> I have a problem regarding the redirection that happens after the
> user is authenticated at th IDP.

You probably do, but it's not what you think it is.

> Here is the details flow :
> 1. I browse to my website. : http://localhost/ABC/Account/Index
> 2. It takes me to the IDP.
> 3. After logging in it does not navigate back to my site instead it takes me to 
>    https://localhost/ABC/Shibboleth.sso/SAML2/POST

That's all perfecly fine and as it should be according to the SAML
specification (Web Browser SSO Profile).

> when it should have taken me back to  http://localhost/ABC/Account/Index

No. First the IDP needs to provide the SP with the SAML Response, and
only after processing this the *SP* may redirect the browser on to the
originally requested resource.

So if everything were working correctly you would indeed see a final
redirect to the resource happen, and the earlier transfer of the SAML
protocol message to the SP would be transparent, and you wouldn't be
asking questions about it.

But you don't say what the actual error (if any) is. You merely
speculate that SAML would work with magic (?) alone instead of with
the transmission of cryprographically signed tokens.

So if you want help in debugging your problem you'll have to be more
specific about what your problem is.

-peter


More information about the users mailing list