RelyParty redirect URL
cantor.2 at osu.edu
Thu Jun 18 18:00:52 UTC 2020
On 6/18/20, 1:52 PM, "users on behalf of Joseph Fischetti" <users-bounces at shibboleth.net on behalf of Joseph.Fischetti at marist.edu> wrote:
> For some reason, error.vm doesn't appear to have the flowExecutionUrl available (and I'm not sure what it's supposed
> to be part of since I don't see where it's set during login.vm).
There isn't one, the flow is complete.
> That said, this should more or less achieve exactly what I'm trying to do. I'm using attribute-resolver to figure out
> whether to send the user to SP-B or not, and if the user goes to SP-B and does that they should do, the attribute will be
> set appropriately. As long as the attribute-resolver is executed after hitting the flowExecutionUrl (assuming SSO takes
> over, as you said), it should work fine.
Attribute resolution happens before post-authn interceptors run.
I really couldn't follow any of the rest given the time I have to look at it.
I will say that everything else aside, there is no "redirect URL" in SAML, only the RelayState, which is opaque.
More information about the users