Shibboleth SP RequestMapper attribute "target" not working in clustering configuration

[Cantor, Scott]

> I simply removed the relayState attribute from the
> <sessions> element, thus letting it pass the resource URL by
> value to the IDP, which is the default. Using the "cookie"
> option for some reason didn't work:

Passing URLs around is a risk if there are sensitive parameters, not to mention a standards violation, just not one software tends to enforce.

Cookies work fine, provided SameSite is mitigated.

-- Scott