relaystate being set by IDP?

[Liam Hoekenga]

>
> Any scenario where RelayState has to be generated by the IdP has to be an
> IdP-initiated one, in which case it's set from the target parameter to that
> endpoint.
>

I had wondered about that.  Thing is, their app present a login screen
(thought I haven't actually been able to log in, because it can't find our
metadata.)
It seems like it would be possible (though weird) for them to present a
login screen that somehow used an IDP initiated SSO URL internally.

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171026/3bcac47c/attachment.html>