clfgz (clfgz) asked a question.
SAML 2.0 - Office 365 - RelayState not working in IdP-initiated login
Hi,
I configured federation between Azure AD custom domain and Okta by using SAML protocol. Azure AD is the Service Provider and Okta is the Identity Provider.
I created a new SAML 2.0 application in Okta and set the SSO URL to : https://login.microsoftonline.com/login.srf and put the URL of my application in the Default Relay State.
The users log into Okta and click the application icon. The authentication works, but the problem is the user is redirected to https://portal.office.com instead of the URL configured in the Default Relay State.
Am I doing something wrong ?
Thank you
Hi Mathieu,
If the user is accessing the app through Okta via an IDP-initiated request, then the relay state you configured in Okta should work so you've done everything right.
To investigate this I recommend getting a SAML trace and confirm if the relay state is passed or not. If the relay state is passed correctly, you can go further and get a fiddler trace and see what happens after the SAML assertion and the relay state reach your app.
If you are not familiar with SAML/Fiddler traces or these don't show what the issue is, I recommend raising a ticket with the support team to further troubleshoot this issue.