Relay State in IDP-initiated SSO

[Mitu Singh <mitusingh27@yahoo.com>]

Hi,

For SP-initiated SSO, the Relay State is sent by the SP along with the Authentication Request. The IDP returns the same Relay State back to the SP when it sends the Saml response. Also, the Relay State could be different for each SSO request.

For IDP-initated SSO, what will be value of the Relay State sent by the IDP? Will SP and IDP have to agree on one relay state or can it vary for each saml response sent? Will the Relay State be the target url on the SP?

Thanks,
-Mitu