<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div dir="ltr"></div>
<div dir="ltr"><a href="https://en.m.wikipedia.org/wiki/URI_fragment">https://en.m.wikipedia.org/wiki/URI_fragment</a></div>
<div dir="ltr"><br>
<blockquote type="cite">On Oct 4, 2022, at 16:55, prasanna cg via users <users@shibboleth.net> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr"><span>Hello Experts,</span><br>
<span></span><br>
<span>I am using Shibboleth SP and noticed that the URL fragment is not getting preserved in a SP Initiated SAML SSO with Shibboleth IDP. The Binding used is REDIRECT.
</span><br>
<span></span><br>
<span>The SAML Auth Request from the SP contains the relay state param as query string (but I also noticed its not url encoded) as below</span><br>
<span></span><br>
<span>ss:mem:fbe378f7b0dd8b9b629a2d0942b0d84ea987cdc72d802671ea16056181ec7b36#r10</span><br>
<span></span><br>
<span>IDP then issues a 302 redirect to “https://urldefense.com/v3/__https://idp.example.com/idp/profile/SAML2/Redirect/SSO?execution=e2s1*r10__;Iw!!IBzWLUs!S6SmQlryu41QiwuBj-mkXlut71PUZRxwZZEK6HBp7kihLp0XDJHiz0_wZUPZMA7BjnLymlpXNklCK_VR$ ”</span><br>
<span></span><br>
<span>From there the Hash Fragment in the relay state is not preserved and lost which causes a lot of user inconvenience.
</span><br>
<span></span><br>
<span></span><br>
<span>What is the solution for this ? Will HTTP POST binding work ? </span><br>
<span></span><br>
<span>We have a lot of applications integrated with our IDP this way for which we share the URL with Hash Fragment to end users to read/review a specific content and take action.
</span><br>
<span></span><br>
<span></span><br>
<span>Looking forward for your response</span><br>
<span></span><br>
<span></span><br>
<span>Thanks,</span><br>
<span>Prasanna</span><br>
<span></span><br>
<span>-- </span><br>
<span>For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!IBzWLUs!S6SmQlryu41QiwuBj-mkXlut71PUZRxwZZEK6HBp7kihLp0XDJHiz0_wZUPZMA7BjnLymlpXNtHMBLIK$ </span><br>
<span>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</span><br>
</div>
</blockquote>
</body>
</html>