SP force no RelayState with AuthnRequest

[Cantor, Scott]

> Is there any way to make the Shibboleth SP do that?

Not directly that I can think of.

> I thought that changing the relayState attribute on the <Sessions> element
> to 'cookie' would result in a RelayState not being sent as part of the
> authentication request since it would be "carried" by a cookie, but the Shib
> SP sends

Cookies don't cross domains; you can't carry the actual state in it, it just stores the URL locally.

> Any ideas?

Apache magic? Do you control the IdP or is that the point of the test?

-- Scott