How remember target resource url use SAML 2.0 Web Browser SSO Profile?

StackOverflow https://stackoverflow.com/questions/21092171

  •  27-09-2022
  •  | 
  •  

Question

I try to implement SAML 2.0 SP-initiated SSO into my application(my application is Service Provider). Scheme of this process is shown in the image below(from wiki).

SP POST Request; IdP POST Response scheme from wiki

How I can remember target resource URL (step 1 on scheme) and later use it on step 6? I have only one idea about it: save that URL on server by AuthRequest id on step 1 and get it by that id on step 6. Is that the right way or not?

Was it helpful?

Solution

A relay state parameter can be sent along with the request for SSO service (AuthnRequest). This will be passed back to the SP it the Request Assertion Consumer Service. You can use this to store the target URL, similarlyto how google does it.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top