Symantec Access Management

 View Only

Dynamically Fetching the relaystate from Partnership

  • 1.  Dynamically Fetching the relaystate from Partnership

    Posted Jul 10, 2020 08:54 AM
    Hi,
    We are facing issues with the below scenario. All/any feedbacks are highly appreciated  
    Scenario: We have two applications using a  single partnership to Authenticate users with ADFS

    ---Problem-------- 
    Customer has saml federation partnership application.
    IDP is Microsoft AD.
    SP is SiteMinder.
    Relaystate was passed in request and Relaystate oeverwrite is enabled within federation partnership.
    However, there is only one Server Error Redirect URL configuration.

    When user is NOT presented in SP side user directory, user gets redirected to "Server Error Redirect URL" page, which is accessDenied.jsp.
    This is expected.

    When user is NOT presented in IDP side user directory, user gets redirected to same "Server Error Redirect URL" page, which is accessDenied.jsp.
    This is NOT expected.
    we are expecting a different page related to dynamic Relaystate target.

    ----Environment---- 
    OS: Windows 2016
    Policy server version: 12.8
    Policy Store: unknown

    web agent option pack:  12.52.108.2504
    web agent option pack OS: Windows 
    web agent option pack app server: Tomcat 9

    We are trying to find a way to dynamically fetch the Application URL form the relay state so that we can redirect the user to the correct error page.

    Thanks,
    Saif