SSO with multiple Google domains

[Cantor, Scott]

> This is the explanation I was given.  It seems I'm able to control RelayState as
> described.

Until your users set a bookmark. This trick works with SPs that don't support SP-initiated SSO, which breaks bookmarks to begin with. I don't know if Google does or not. It would otherwise depend on what the error outcome looked like if they ignored your links.

Andrew seems to be pointing out the better fix here.

-- Scott