Do you support RelayState when logging in with SAML from an external IdP?

(Megazone PoPs) 홍창민 0

I have successfully done SAML integration with my IdP by following this document.

However, when I initiate SSO from IdP and send a url to RelayState,

it does not move to that url after SSO.

If i sent SAMLResponse like this : https://login.microsoftonline.com/login.srf?SAMLResponse=....&**RelayState=https%3A%2F%2Fportal.azure.com**

After SAML SSO, I expected to be redirected to https://portal.azure.com.

But it was just SSO.

Does the IdP Initiate flow not support deep linking via RelayState?

Navya 20,180 Reputation points Microsoft External Staff Moderator

2024-08-01T07:46:39.39+00:00

Hi @(Megazone PoPs) 홍창민

Thank you for posting this in Microsoft Q&A.

Yes, Relay Value support in SAML IDP initiate flow. Relay State value should be configured in the SAML configuration of the application, not in the SAML Response URL. The value in this form only takes effect in an IdP-initiated SSO flow. If your application uses SP-initiated SSO, then the service provider needs to send the Relay State as a parameter in the SAML request.

In Entra admin center portal, go to the Enterprise applications, find yours, go to Single sign-on and you will find it under Basic SAML Configuration. You can find more information in Enable single sign-on for an app.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.
(Megazone PoPs) 홍창민 0 Reputation points

2024-08-01T08:43:19.05+00:00

Hi Navya!

Thank you very much for your reply.

But unfortunately, I think my question was misunderstood.

My question was whether DeepLinking via RelayState is supported in SAML flows initiated from External Identity Provider when Microsoft Entra ID is the SP and not the IdP.

For example, if you send the parameter RelayState=https://portal.azure.com when starting SAML SSO in Okta Launcher, you would want to be able to navigate to https://portal.azure.com after logging in to Microsoft.

I am waiting for your help.

Thanks.

Your answer