More than one SAML relay state

Kevin Taber 6 Reputation points
2022-03-14T15:13:18.243+00:00

Oracle Taleo Business Edition using SAML 2.0 SSO in Azure.

Oracle's app provides two Relay State URLs... one for users the other for employees.

In Azure there is only one Relay State field. Is there a way to use both Relay States in this single field.... I tried using a semicolon but that didn't work.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,581 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Siva-kumar-selvaraj 15,551 Reputation points
    2022-03-19T22:30:13.983+00:00

    Hello @Kevin Taber ,

    Enterprise applications in Azure AD cannot have more than one RelayState because this value is static and this instructs the application where to redirect users after authentication is completed, and the value is typically a URL or URL path as shown below that takes users to a specific location within the application. The value in this form only takes effect in an IdP-initiated SSO flow.

    184853-image.png

    To support multiple/Dynamic RelayState URLs, your app must use SP-initiated SSO, and send the RelayState as a parameter in the SAML request as shown below, so that Azure AD can return the same information in the SAML Response.

    184826-image.png

    You can get more details about Relaystate from SAML V2.0 technical description. Hope this helps.

    -----
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments