How is the Relaystate Parameter Used With a SAML Authentication Request

(Doc ID 416242.1)

Last updated on MARCH 08, 2017

Applies to:

COREid Federation - Version: 10.1.4.0.1 and later   [Release: 10g and later ]
Information in this document applies to any platform.

Goal

Abbreviations:
OIF : Oracle Identity Federation
IDP : Identity Provider
SP   : Service Provider

Q1: In our configuration, Oracle Identity Federation (OIF) is the Identity Provider (IDP) and all SSO operations will be initiated by the Service Providers (SP's). We are using the service provider (SP) initiated, browser post profile. In this case, our partners (the service providers) will be sending us an authentication request and then we will generate and post the assertions back to them.

In this configuration, does the service provider need to supply OIF (the Identity Provider) a relayState Param as part of the URL with the authentication request? If so, what would it be used for and what value should we expect?

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms