IdPUnsolicitedSSO + relayState

[Lalith Jayaweera]

Thanks Peter for the detailed explanation

On Thu, Sep 28, 2017 at 6:46 PM, Peter Schober <peter.schober at univie.ac.at>
wrote:

> * Lalith Jayaweera <ljayaweera at gmail.com> [2017-09-28 09:16]:
> > For one of our IdP initiated SPs, there is a request to have RelayState
> as
> > a specific URL [...]
> > https://wiki.shibboleth.net/confluence/display/SHIB2/IdPUnsolicitedSSO
> > can I safely assume, it is all about setting 'target' param in the
> > relyingparty xml
>
> Fyi, unless you're still using IDPv2 that's not the right
> documentation, for IDPv3 it's here:
> https://wiki.shibboleth.net/confluence/display/IDP30/
> UnsolicitedSSOConfiguration
>
> And the documented parameters are for query strings (i.e., request
> parameters) for HTTP GET requests sent to the IDP:
>
>   target (optional)
>     Corresponds to RelayState in the SAML 2.0 protocol, but can be
>     omitted.
>
> So you'd set 'providerId' to the (URL-encoded) entityID of the SP and
> 'target' to the URL you want to end up with at the SP (or the opaque
> RelayState value the SP wants you to use).
>
> You don't have to change any configuration files in order to use the
> above interface.
>
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170928/d5f78ba8/attachment.html>