In the IDP : Retrieving the URL from the SP

Cantor, Scott cantor.2 at osu.edu
Mon Feb 4 09:08:48 EST 2019


On 2/4/19, 7:03 AM, "users on behalf of Thomas Colin de Verdière" <users-bounces at shibboleth.net on behalf of tdeverdiere at kapit.fr> wrote:

> You said earlier about the relay state that it is not permitted to be over 80 characters. Why is this limitation ?

Because that's what the standard says, and to prevent people from believing they can pass the URL to the IdP, which is not the intended way to do things. The IdP is not meant to have access to that information and depending on it couples the IdP and the SP in ways they should not be coupled.

> Is the value of this extension can be extracted in Shibboleth IDP to be saved elsewhere to be retreived after the user
> inscription, if the container session expired.

There is nothing at all available once that session expires. The extension is there for the life of the original request.

-- Scott




More information about the users mailing list