RelyParty redirect URL

[Cantor, Scott]

On 6/18/20, 1:52 PM, "users on behalf of Joseph Fischetti" <users-bounces at shibboleth.net on behalf of Joseph.Fischetti at marist.edu> wrote:

> For some reason, error.vm doesn't appear to have the flowExecutionUrl available (and I'm not sure what it's supposed
> to be part of since I don't see where it's set during login.vm).

There isn't one, the flow is complete.

> That said, this should more or less achieve exactly what I'm trying to do.  I'm using attribute-resolver to figure out
> whether to send the user to SP-B or not, and if the user goes to SP-B and does that they should do, the attribute will be
> set appropriately.  As long as the attribute-resolver is executed after hitting the flowExecutionUrl (assuming SSO takes
> over, as you said), it should work fine.

Attribute resolution happens before post-authn interceptors run.

I really couldn't follow any of the rest given the time I have to look at it.

I will say that everything else aside, there is no "redirect URL" in SAML, only the RelayState, which is opaque.

-- Scott