Relaystate cookies request size limit exceeded

[Philip Brusten]

Hi

We have an SP that uses the ODBC StorageService. We also use this SS for 
persisting the relayState.

When users make lots of sign-in requests, without actually logging in, 
they collect several relayState-cookies and eventually the request size 
limit exceeds.

The relayState cookies are prefixed with "_opensaml_req_ss:db". The 
relayState is also passed as a request param to the IdP, so I wonder if 
this cookie is necessary.
For instance, when using relayState="ss:mem", no cookies are involved 
and the relayState is passed by request param to the IdP and back.

The relayState "cookie" mechanism provides a clean-up suffix ":n". Is it 
possible to support this suffix when using the ODBC-storageservice for 
the relayState?

Kind regards,

Philip