Wednesday, June 27, 2012 12:31 PM
I have a salesforce RP configured in ADFS 2.0 with update rollup 2. in the RP there are three endpoints representing three salesforce instances. i want to know if it is possible to pass the endpoint index / ID / string value to the IDP as a parameter in the URL
something like https://...../adfs/ls/idpinitiatedsignon.aspx?logintorp=://saml.salesforce.com&index=0
SP initiated connection works fine as you use the 'my domain' dns name and get redirected. the trouble is, the safari browser on ipads does not work as it chops off half of the relaystate. I can however do IDP initiated connections from the ipad but adfs always directs the client to the deault endpoint for the RP.
any ideas would be greatly appreciated.
Wednesday, June 27, 2012 4:37 PMI don't think it's possible. That's the whole point of RelayState.
Developer Security MVP | www.syfuhs.net
Wednesday, June 27, 2012 9:40 PM
but if it is not possible then with idp initiated sessions you can only ever connect to the default endpoint!? that can't be right surely?
this info is obviously passed in a samlresponse from the RP for SP initiated sesisons, so there must be a way of supplying this for an idp session, especially as i already know what the values are.