Bug ID 1589481: In IDP-initiated flow, Relay state sent in SAML response is not considered by the SP and SP rather uses Relay state configured in its config

Last Modified: Dec 05, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4

Fixed In:
17.1.2

Opened: May 27, 2024

Severity: 3-Major

Symptoms

SP redirects to incorrect relay state

Impact

SAML SSO is not successful

Conditions

-- SP service configured with one Relay state value -- SP connector of IDP config configured with a different Relay state value than that of SP config

Workaround

Configure relay state value of both sp service and sp connector to be identical.

Fix Information

Fixed an issue preventing SAML SSO from working.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips