IDP not forwarding to correct protected page
Peter Schober
peter.schober at univie.ac.at
Fri Jan 27 07:37:47 EST 2017
* Rod Widdowson <rdw at steadingsoftware.com> [2017-01-27 10:17]:
> By default the IdP will just send you back to where the SP told it
> do (indeed off the top of my head I'd not know how to make it do
> otherwise) so that argues more of an issue on the SP side.
Setting ApplicationDefaults/@homeURL in the SP's shibboleth2.xml would
allow overriding the final redirect to the resources after processing
the SAML is done.
The IDP doesn't have any features for that, I think, as it has to
return RelayState /verbatim/ to the SP as per the SAML specs.
-peter
More information about the users
mailing list