I noticed, when looking at the HTTP traffic, that there are actually two shibstate entries in the cookies, one for /partner/bigOrg and one for /partner/bigOrg/littleOrg. I will look more into the webserver config to see what is going on, but do both of those entries make up the relayState? The homeUrl in our Application is set to /partner/bigOrg, so does that affect relayState for SP initiated SSO?<div>
<br></div><div>I am trying to make sure I am working with relayState the right way because I don't want our partner to force us off spec because they want to get out of a little dev work.<br><br><div class="gmail_quote">
On Mon, Jul 16, 2012 at 5:05 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 7/16/12 5:02 PM, "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br>
><br>
>>What I have noticed is the browser is redirected to /partner/bigOrg,<br>
>>which isn't really what I wanted, but there is a cookie named<br>
>>_shibstate_**** that has the URL I want in it.<br>
><br>
>That isn't possible. Using "cookie" for relayState will result in the URL<br>
>being stored off in the shibstate cookie, and then that's where it will<br>
>redirect you after the POST. You can easily verify that with a browser<br>
>plugin like LiveHeaders.<br>
<br>
</div>The correlary to this is that if you're ending up at /partner/bigOrg, then<br>
your web server caused the SP's redirect to /partner/bigOrg/littleOrg to<br>
be rewritten or secondarily redirected to /partner/bigOrg. All of that is<br>
out of the SP's hands.<br>
<div class="HOEnZb"><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>