<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">On 5/5/20 3:02 AM, Luo, Pan wrote:<br>
</div>
<blockquote type="cite"
cite="mid:C99889F0-653E-4114-97F6-24D9EC5A3A19@ubc.ca">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
It seems I only need to add the RelayState=<a
href="https://region-id.console.aws.amazon.com/connect/federate/instance-id"
class="" moz-do-not-send="true">https://region-id.console.aws.amazon.com/connect/federate/instance-id</a> to
the end of Idp initiated SSO URL. But it doesn't work. The URL I
tried is something like this:
<div class=""><br class="">
</div>
<div class=""><a
href="https://our.idp/idp/profile/SAML2/Unsolicited/SSO?providerId=urn:amazon:webservices&relayState="
class="" moz-do-not-send="true">https://our.idp/idp/profile/SAML2/Unsolicited/SSO?providerId=urn:amazon:webservices&relayState=</a><a
href="https://region-id.console.aws.amazon.com/connect/federate/instance-id"
class="" moz-do-not-send="true">https://region-id.console.aws.amazon.com/connect/federate/instance-id</a></div>
<br>
</blockquote>
<p><br>
</p>
<p>In the Shib Unsolicited SSO protocol, for historical reasons the
request param name is 'target', not 'RelayState':</p>
<p><a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP4/UnsolicitedSSOConfiguration#UnsolicitedSSOConfiguration-SAML2.0">https://wiki.shibboleth.net/confluence/display/IDP4/UnsolicitedSSOConfiguration#UnsolicitedSSOConfiguration-SAML2.0</a><br>
</p>
</body>
</html>