RelayState should be a parameter of the SAML assertion not an attribute

Mathew, Sunil smathew at hbs.edu
Thu Sep 17 15:06:35 UTC 2020


Hi,

Can you please let me know how I can send back RelayState as a parameter of the SAML assertion instead of as an attribute. I am using Idp 3.1.1.


Below is an example of what the RelayState should look like within the SAML assertion.

      <saml2:Attribute Name="title" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified">
              <saml2:AttributeValue xmlns:xs="http://www.w3.org/2001/XMLSchema<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.w3.org%2F2001%2FXMLSchema&data=02%7C01%7Csmathew%40hbs.edu%7Ce72e47a90f7b4d80dd4b08d85a637b21%7C09fd564ebf4243218f2db8e482f8635c%7C0%7C0%7C637358730630976218&sdata=S3%2FWMYDEytqUo%2BE237GuAjpbT%2BUcneylMFkPFs251A0%3D&reserved=0>" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.w3.org%2F2001%2FXMLSchema-instance&data=02%7C01%7Csmathew%40hbs.edu%7Ce72e47a90f7b4d80dd4b08d85a637b21%7C09fd564ebf4243218f2db8e482f8635c%7C0%7C0%7C637358730630976218&sdata=ygYhYtJLWmVdwCRIWOcK9GRFaW4afSF6AeTpYMLJFPM%3D&reserved=0>" xsi:type="xs:string"/>
            </saml2:Attribute>
            <saml2:Attribute Name="mobile" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"/>
          </saml2:AttributeStatement>
        </saml2:Assertion>
      </saml2p:Response>"/>
      <Param name="RelayState" value=" https://cventapp.okta.com/home/oidc_client/0oaepbljczJ3FE7Mh1t7/alntwmdyyUB5fs8d50g4"/<https://cventapp.okta.com/home/oidc_client/0oaepbljczJ3FE7Mh1t7/alntwmdyyUB5fs8d50g4%22/>>
    </Params>


Thanks,
Sunil

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200917/6dad9869/attachment.htm>


More information about the users mailing list