<div dir="ltr">Hi Peter<div><br></div><div>sorry for he confusion....</div><div><br></div><div>For some reason SP still failing and Vendor looking into it....I just wanted to make sure IdP has done what it supposed to do with respect to 'relayState'.</div><div><br></div><div>Given I can see below pattern in the response, I wanted to make sure IdP has done what it supposed to do and also the query string params are correct (from the point of view of the Syntax)</div><div><pre id="gmail-m_8402097663698228289gmail-txt" style="white-space:pre-wrap"><b>POST
</b><b>RelayState</b>: <a href="https://idpweb1.vu.edu.au/idp/profile/SAML2/Unsolicited/SSO?providerId=https://askvu.vu.edu.au/cgi-bin/askvu.cfg/php/admin/sso_launch.php?p_subject=Account.Login&target=https://askvu.vu.edu.au/AgentWeb/" target="_blank" style="font-family:arial,sans-serif;white-space:normal">https://vendortarget.com/<wbr>AgentWeb/</a>
<b>SAMLResponse</b>: PD94bWwgdmVyc2lvbj0iMS4......</pre></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Oct 9, 2017 at 9:27 PM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Lalith Jayaweera <<a href="mailto:ljayaweera@gmail.com">ljayaweera@gmail.com</a>> [2017-10-09 04:31]:<br>
> <a href="https://myidp.com/idp/profile/SAML2/Unsolicited/SSO?providerId=https://vendor.com/cgi-bin/?p_subject=myAccount" rel="noreferrer" target="_blank">https://myidp.com/idp/profile/<wbr>SAML2/Unsolicited/SSO?<wbr>providerId=https://vendor.com/<wbr>cgi-bin/?p_subject=myAccount</a><br>
><br>
><a href="https://idpweb1.vu.edu.au/idp/profile/SAML2/Unsolicited/SSO?providerId=https://askvu.vu.edu.au/cgi-bin/askvu.cfg/php/admin/sso_launch.php?p_subject=Account.Login&target=https://askvu.vu.edu.au/AgentWeb/" rel="noreferrer" target="_blank">https://idpweb1.vu.edu.au/<wbr>idp/profile/SAML2/Unsolicited/<wbr>SSO?providerId=https://askvu.<wbr>vu.edu.au/cgi-bin/askvu.cfg/<wbr>php/admin/sso_launch.php?p_<wbr>subject=Account.Login&target=<wbr>https://askvu.vu.edu.au/<wbr>AgentWeb/</a><br>
<br>
Hard to say which one of those two you're talking about.<br>
Also neither of those request parameters has been urlencoded like it<br>
should be.<br>
<span class=""><br>
> Then I changed it to below<br>
><br>
> <a href="https://myidp.com/idp/profile/SAML2/Unsolicited/SSO?providerId=https://vendor.com/cgi-bin/?p_subject=myAccount&target=https://vendortarget.com/AgentWeb/" rel="noreferrer" target="_blank">https://myidp.com/idp/profile/<wbr>SAML2/Unsolicited/SSO?<wbr>providerId=https://vendor.com/<wbr>cgi-bin/?p_subject=myAccount&<wbr>target=https://vendortarget.<wbr>com/AgentWeb/</a><br>
><br>
</span>><a href="https://idpweb1.vu.edu.au/idp/profile/SAML2/Unsolicited/SSO?providerId=https://askvu.vu.edu.au/cgi-bin/askvu.cfg/php/admin/sso_launch.php?p_subject=Account.Login&target=https://askvu.vu.edu.au/AgentWeb/" rel="noreferrer" target="_blank">https://idpweb1.vu.edu.au/<wbr>idp/profile/SAML2/Unsolicited/<wbr>SSO?providerId=https://askvu.<wbr>vu.edu.au/cgi-bin/askvu.cfg/<wbr>php/admin/sso_launch.php?p_<wbr>subject=Account.Login&target=<wbr>https://askvu.vu.edu.au/<wbr>AgentWeb/</a><br>
<br>
The target parameter should be the only thing not urlencoded here, in<br>
both cases.<br>
<span class=""><br>
> I kind of tend to believe IdP has done what it supposed to do, even though<br>
> the relay state was not appearing in the query string but somehow<br>
> maintained in the IdP<br>
><br>
> Please let me know above understanding is correct<br>
<br>
</span>I have no idea what you're asking. AFAICT you're saying everything it<br>
working fine, are asking why it's working?<br>
<div class="HOEnZb"><div class="h5"><br>
-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br>
</div></div></blockquote></div><br></div>