Does Shibboleth Idp support relayState parameter in IDP Initiated SSO

Brent Putman putmanb at
Tue May 5 08:30:06 UTC 2020

On 5/5/20 3:02 AM, Luo, Pan wrote:
> It seems I only need to add the 
> RelayState= to 
> the end of Idp initiated SSO URL. But it doesn't work. The URL I 
> tried is something like this:
> https://our.idp/idp/profile/SAML2/Unsolicited/SSO?providerId=urn:amazon:webservices&relayState=

In the Shib Unsolicited SSO protocol, for historical reasons the 
request param name is 'target', not 'RelayState':

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list