[IdP] OriginalURL in DoLogin Preparation isn't saved in Session.DestinationURL for POST

[IdP] OriginalURL in DoLogin Preparation isn't saved in Session.DestinationURL for POST

  
Forge Component
(25)
Published on 4 Jul by Telmo Martins
25 votes
Published on 4 Jul by Telmo Martins

Hello!

I found that OriginalURL in  DoLogin Preparation isn't saved in Session.DestinationURL for POST binding type. 

GetConfig.Configuration.IdPConfig.SSOUrlBindId = Entities.SamlMessageBind.POST

I case of POST preparation flow goes by branch where OriginalURL isn't saved in Session.DestinationURL and javascript sends POST from page.

It means that after successful login OriginalURL isn't used to redirect for HTTP-POST case while it works for HTTP-Redirect case. 

Could somebody explain why it implemented in this way?

Valery

Solution

Hi Valerij,

Also with HTTP-POST the Session.DestinationURL should be set with the OriginalURL.

Thanks, it will be included in the next version.

Regards

Solution