Tuesday 10 April 2018

Relay State in OAM



·            'Relay state’ parameter is used to automate the redirection of a user to a specific target page URL as soon as authentication against IDP is completed successfully and SAML assertion is posted to SP.
·            If it is required to show the user a specific landing page other than the home page we can configure it through Relay state.
·            E.g. If we want to take directly the user to a particular training course; we can configure it as /sf/learning/training_module_ 5 etc.
·            We can pass this value using UpdatePrtnerProperty command using wlst as below:  
  
updatePartnerProperty(partnerName="salesforce",partnerType="SP",propName="providerrelaystate",propValue="https:sf/learning/training/internal ",type="string")  

Steps:
cd /opt/oracle/middleware/Oracle_IDM1/common/bin
./wlst.sh
connect ('weblogicuser','password','t3://host:port')
domainRuntime()
updatePartnerProperty(partnerName="SalesforceSP",partnerType="sp", propName="providerrelaystate", propValue="/sf/learning")

·            Relay state values can’t be seen in SAML response but it can be observed in network trace.
·            Press F12 ànetwork àpreserve logàhit the urlàscroll down
·            At the end we can see the parameter as shown below:


RelayState: /sf/learning




 **** Thanks for visiting ****

2 comments:

  1. after running the WLST for updating the RELAYSTATE URL, is there any way to rollback

    ReplyDelete
  2. It saves relay state values in oamconfig.xml file.
    It can be changed back again from server.

    ReplyDelete

   Here we are going to discuss the steps required in detail, to extend a connector in OIM for provisioning to target system. Steps are s...