<div dir="ltr"><div class="gmail_default" style="font-family:arial,sans-serif">You know WAY more about how all this works so I apologize for my ignorance.  Maybe it's the "response location" I'm looking for and just can't find it.</div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif">Let's use the Terms of Use as an example as I just tested this a few minutes ago.</div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif">When I type <b><a href="https://mySP.com/Page1">https://mySP.com/Page1</a></b> or <b><a href="https://mySP.com/Page2">https://mySP.com/Page2</a></b>, the IdP prompts me for my cert and PIN, then takes me to the proper location, Page1 or Page2.</div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif">Is Page1 or Page2 contained in the "response location"?  If so, where is that saved at?  Cookie?  Session variable?  Basically, how could I show this on the page? </div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_default" style="font-family:arial,sans-serif">"You were trying to get to <b><a href="https://mySP.com/Page1">https://mySP.com/Page1</a></b>.  To do so, you must first accept our Terms of Use."</div></blockquote><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif">If it's saved somewhere else, where is that somewhere else?</div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif">Thanks a bunch,</div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif">Robert "Check" Adamczyk</div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif"><br></div><div class="gmail_default" style="font-family:arial,sans-serif"><div class="gmail_default"></div></div></div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Thu, Jan 2, 2025 at 1:30 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">> How does it know where the user was heading to?<br>
<br>
It doesn't, that's all up to the SP to handle. The things an IdP knows are the identity of the SP, the response location (from the metadata), and the state token, which is opaque.<br>
<br>
Of those, the identity of the SP is the only relevant bit that can be used in any sort of "what was the user trying to do?" sense.<br>
<br>
-- Scott<br>
<br>
<br>
</blockquote></div>