SP force no RelayState with AuthnRequest

Scott Koranda skoranda at gmail.com
Thu Apr 26 10:06:52 EDT 2018


Hi,

I am attempting to have a Shibboleth SP 2.6.x mimic a non-Shibboleth
SP's behavior so I can troubleshoot a SAML flow.

The non-Shibboleth SP sends an authentication request with no RelayState
(none at all).

Is there any way to make the Shibboleth SP do that?

I thought that changing the relayState attribute on the <Sessions>
element to 'cookie' would result in a RelayState not being sent as part
of the authentication request since it would be "carried" by a cookie,
but the Shib SP sends

RelayState: cookie:1524678205_bbc2

I need to have the SP use the HTTP-Redirect binding to cause a GET with
a SAMLRequest parameter but no RelayState parameter.

Any ideas?

Thanks,

Scott K


More information about the users mailing list