Relay state is a bucket of bits undefined by SAML that is used to
carry some information from the Relying party back to themselves following the
AuthnRequest with the idP. For example, the RP could include some data
indicating the resource that the user was attempting to access that caused the
RP to initiate the authentication (remember the IdP must send the browser back
to the assertion consuming URL at the RP).
An alternative to using relay state would be to include this
data within a cookie in the browser or some other session state method.
Relay state was intended to be used when those were not available or not
preferred by the RP.
Conor
From: giorgi moniava
[mailto:]
Sent: Monday, July 14, 2008 3:45 PM
To: Cahill, Conor P;
Subject: <RelayState> element
Hello,
I seem not to be able to find, any specification of SAML 2.0,
which describes in details, what the <RelayState> element is,
and what it is used for. I would appreciate very much if someone can indicate,
where I could find further information about such an element.
Giorgi.
