how to tell the IDP which RP endpoint to use

Question

Hi,

I have a salesforce RP configured in ADFS 2.0 with update rollup 2.  in the RP there are three endpoints representing three salesforce instances.  i want to know if it is possible to pass the endpoint index / ID / string value to the IDP as a parameter in the URL

something like https://...../adfs/ls/idpinitiatedsignon.aspx?logintorp=://saml.salesforce.com&index=0

SP initiated connection works fine as you use the 'my domain' dns name and get redirected.  the trouble is, the safari browser on ipads does not work as it chops off half of the relaystate.  I can however do IDP initiated connections from the ipad but adfs always directs the client to the deault endpoint for the RP.

any ideas would be greatly appreciated.

cheers,

jamie

Answer 1

I don't think it's possible. That's the whole point of RelayState.

---

Developer Security MVP | www.syfuhs.net

Answer 2

but if it is not possible then with idp initiated sessions you can only ever connect to the default endpoint!?  that can't be right surely?

this info is obviously passed in a samlresponse from the RP for SP initiated sesisons, so there must be a way of supplying this for an idp session, especially as i already know what the values are.

jamie