<div dir="ltr">Hm.<div><br></div><div>So the survey link looks like..</div><div><a href="https://umich.qualtrics.com/SE/?SID=SV_BLAHBLAHBLAH">https://umich.qualtrics.com/SE/?SID=SV_BLAHBLAHBLAH</a></div><div><br></div><div>which generates a 302 to the redirect endpoint:</div><div><br></div><div><a href="https://shibboleth.umich.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=rVJdj9MwEPwrkd8Tp%2Bm1JVZbqVyFqHRwVVM4iRfk2FtiybFz3jWFf08%2BQBw89OmeLI13Zmdnd42ytZ3YRWrcCZ4jICU%2FWutQjB8bFoMTXqJB4WQLKEiJavfhQRRZLrrgyStv2QvKbYZEhEDGO5Yc9hv2tVyuVos7qfJisdB35ZtlodSi1LM6BymhnM3n5UXLYgk1Sz5DwJ65Yb1QT0eMcHBI0lEP5bNVms%2FSIj8XuZiXolh9Ycm%2Bn8Y4SSOrIepQcI6NqWtvgZostkY1GejIje54P83FWOCD2YKfQJsAinhVPbJk98f3vXcYWwgVhO9GwafTw1%2FlSe45SkvBKMyUb%2FnTaZDjaNrOwpAPv16vvPU6Wsi6puMjhtNbpLKnDaiGi4yWUuxYcvyd8lvjtHHfbgdcT0Uo3p%2FPx%2FT4WJ3Zdj1oizGwsH0Vsy2Q1JLkf17X%2FGWn9XRaH3uPh%2F3RW6N%2BJu98aCXdHmFAjE4vY6mgIB0acNQvwVp%2FvQ8gCTaMQgTGt1PLfw94%2Bws%3D&RelayState=https%3A%2F%2Fumich.qualtrics.com%2FSE%2F%3FSID%3DSV_BLAHBLAHBLAH">https://shibboleth.umich.edu/idp/profile/SAML2/Redirect/SSO?SAMLRequest=rVJdj9MwEPwrkd8Tp%2Bm1JVZbqVyFqHRwVVM4iRfk2FtiybFz3jWFf08%2BQBw89OmeLI13Zmdnd42ytZ3YRWrcCZ4jICU%2FWutQjB8bFoMTXqJB4WQLKEiJavfhQRRZLrrgyStv2QvKbYZEhEDGO5Yc9hv2tVyuVos7qfJisdB35ZtlodSi1LM6BymhnM3n5UXLYgk1Sz5DwJ65Yb1QT0eMcHBI0lEP5bNVms%2FSIj8XuZiXolh9Ycm%2Bn8Y4SSOrIepQcI6NqWtvgZostkY1GejIje54P83FWOCD2YKfQJsAinhVPbJk98f3vXcYWwgVhO9GwafTw1%2FlSe45SkvBKMyUb%2FnTaZDjaNrOwpAPv16vvPU6Wsi6puMjhtNbpLKnDaiGi4yWUuxYcvyd8lvjtHHfbgdcT0Uo3p%2FPx%2FT4WJ3Zdj1oizGwsH0Vsy2Q1JLkf17X%2FGWn9XRaH3uPh%2F3RW6N%2BJu98aCXdHmFAjE4vY6mgIB0acNQvwVp%2FvQ8gCTaMQgTGt1PLfw94%2Bws%3D&RelayState=https%3A%2F%2Fumich.qualtrics.com%2FSE%2F%3FSID%3DSV_BLAHBLAHBLAH</a><br></div><div><br></div><div>which generates a 302 to "/idp/profile/SAML2/Redirect/SSO?execution=e?s?"</div><div><br></div><div>I'm asking our qualtrics folks if they have any idea where another redirect could be embedded in the flow.</div><div><br></div><div>Liam</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jan 20, 2017 at 2:25 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 1/20/17, 3:06 PM, "users on behalf of Liam Hoekenga" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:liamr@umich.edu">liamr@umich.edu</a>> wrote:<br>
<br>
> It's a link in to qualtrics.  Our IDP isn't in the query string, the conversation isn't reference during the redirect, and it's upon<br>
> initial access (no back-button).<br>
<br>
</span>It may not be anywhere you see it, but it's there. Probably something they stuck inside the survey I would guess. Trace the redirects. If the first access to the IdP doesn't have a SAMLRequest parameter you know they baked in a link to it inside the survey.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote></div><br></div>