IdPUnsolicitedSSO + relayState

[Peter Schober]

* Lalith Jayaweera <ljayaweera at gmail.com> [2017-09-28 09:16]:
> For one of our IdP initiated SPs, there is a request to have RelayState as
> a specific URL [...]
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPUnsolicitedSSO
> can I safely assume, it is all about setting 'target' param in the
> relyingparty xml

Fyi, unless you're still using IDPv2 that's not the right
documentation, for IDPv3 it's here:
https://wiki.shibboleth.net/confluence/display/IDP30/UnsolicitedSSOConfiguration

And the documented parameters are for query strings (i.e., request
parameters) for HTTP GET requests sent to the IDP:

  target (optional)
    Corresponds to RelayState in the SAML 2.0 protocol, but can be
    omitted.

So you'd set 'providerId' to the (URL-encoded) entityID of the SP and
'target' to the URL you want to end up with at the SP (or the opaque
RelayState value the SP wants you to use).

You don't have to change any configuration files in order to use the
above interface.

-peter