Getting the Destination URL for a scripted attribute?

Bryan K. Walton bwalton+1573850983 at leepfrog.com
Fri Nov 15 17:00:22 EST 2019


On Fri, Nov 15, 2019 at 09:51:05PM +0000, Cantor, Scott wrote:
> > Therefore, I'd like to find a way to add into Andy's script a way to set
> > duoflag = "0" depending on the authenticated users's destination URL. 
> 
> You don't get the URL unless you control the SP enough to force it to violate the standard with respect to RelayState, which is not meant to carry it.
> 

Thanks for the reply, Scott.  This is interesting.  So, what I hear you
saying that is that even though I can see the destination URL in the
idp-process.log, there isn't a way to work with it? (other than the
relayState standard violation).

Thanks!
Bryan


More information about the users mailing list