Relat State Parameter

[Jaime Britton]

We have the below requirement for a SAMLv2 federation. Please advise how we can accomplish this using SiteMinder 12.8 SP1. SiteMinder is the IDP in this scenario.

• Expectation is that the IdP will submit to SP SSO endpoint a SAML v2 assertion via an HTTP POST request with a RelayState parameter

• RelayState will be set to either AAA or BBB to denote the users desired destination (Application A or Application B) based on their selection in the IdP

Thanks,
Jaime

[Warren Barrow]

Hi Jaime,

RelayState can be appended to the end of the IDP-initiated URL.  For example, integration with Google Apps, you can use RelayState to be redirected to one of their many services like calendar or mail

https://SiteMinder_IDP/affwebservices/public/saml2sso?SPID=google.com&RelayState=https://calendar.google.com

https://SiteMinder_IDP/affwebservices/public/saml2sso?SPID=google.com&RelayState=https://mail.google.com

Hope this helps,

Warren

[Peter Burant]

Please note the RelayState value must be URL-encoded.  Although some values will work as expected without encoding, always URL-encode the RelayState values to assure they are processed as expected in all situations.

Also note that SAML query parameters are case sensitive, so RelayState should always use this mixed case.

Regards,
Pete

[Jaime Britton]

Thanks Warren.

With this integration the requirement is for the user to select an option and then be given the appropriate relay state value. Can this be set up using SIteMinder UI? 

Thanks,
Jaime