Bug ID 1589481: In IDP-initiated flow, Relay state sent in SAML response is not considered by the SP and SP rather uses Relay state configured in its config

Last Modified: Sep 27, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4

Opened: May 27, 2024

Severity: 3-Major

Symptoms

SP redirects to incorrect relay state

Impact

SAML SSO is not successful

Conditions

-- SP service configured with one Relay state value -- SP connector of IDP config configured with a different Relay state value than that of SP config

Workaround

Configure relay state value of both sp service and sp connector to be identical.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips