Danish nemlogin, URL is malformed.

[Bo Lorentsen]

On 27-06-2018 21:01, Cantor, Scott wrote:
>> I am not doing anything special, only what shibboleth is doing as default
>> (sending the current location url ... I quess).
> That is not the SP default, in the sense that it's not what the configuration as-shipped does, but I believe it's the default if the as-shipped relayState setting is not set due to having been removed. It's a code default but not an out of the box default. If that's what the SP is doing, then the IdP does have a bug.
The default example config in debian has relayState="ss:mem" ... but the
doc say that we will fallback to relayState, if this is totally left out
(as You stated). I use an application override per domain I handle
(domain=idP), and none of there Sessions blocks have this relayState,
and will therefore will be normal idP relayState behavior (just to clarify).

You made med dive down in a few new things. I took a closer look into
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions ...

It seems like I could make one of these instead

<Sessions relayState="cookie" ...

or "ss:mem"

Both of these uses relayState as transportation, so quess what ... they
are both URL encoded on there return, by the idP :-(

So again ... back to the original plan, talk to idP (a large Danish
governmental cooperation .. )

/BL