Revision: 2246
Author: olavmrk
Date: Tue Apr 6 00:21:07 2010
Log: docs: Update documentation for IdP first authentication.
http://code.google.com/p/simplesamlphp/source/detail?r=2246
Modified:
/trunk/docs/simplesamlphp-idp.txt
=======================================
--- /trunk/docs/simplesamlphp-idp.txt Thu Mar 18 06:10:18 2010
+++ /trunk/docs/simplesamlphp-idp.txt Tue Apr 6 00:21:07 2010
@@ -221,7 +221,16 @@
https://idp.example.org/simplesaml/saml2/idp/SSOService.php?spentityid=sp.example.org
-When the IdP-first flow is used an extra parameter is needed in the
`saml20-sp-hosted` metadata. This is the `RelayState` parameter that tells
the SP which URL to redirect the user to after the user is successfully
authenticated. This typically is the frontpage of your application. An
example of this can be:
-
- 'RelayState' => '/',
-
+If the SP is a simpleSAMLphp SP, you must also specify a `RelayState`
parameter for the SP.
+This must be set to an URL the user should be redirected to after
authentication.
+The `RelayState` parameter can be specified in the [SP
configuration](saml:sp), or it can be sent from the IdP.
+To send the RelayState parameter from a simpleSAMLphp IdP, specify it in
the query string to SSOService.php:
+
+
https://idp.example.org/simplesaml/saml2/idp/SSOService.php?spentityid=sp.example.org&RelayState=https://sp.example.org/welcome.php
+
+To set it in the SP configuration, add it to `authsources.php`:
+
+ 'default-sp' => array(
+ 'saml:SP',
+ 'RelayState' => 'https://sp.example.org/welcome.php',
+ ),
--
You received this message because you are subscribed to the Google Groups
"simpleSAMLphp commits" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/simplesamlphp-commits?hl=en.
