diff --git a/docs/simplesamlphp-idp.txt b/docs/simplesamlphp-idp.txt index 661705d45e707cc94cc1f76d59b00b579590bfe9..88b289f9532a3926438ace9415644bd6a25b9f05 100644 --- a/docs/simplesamlphp-idp.txt +++ b/docs/simplesamlphp-idp.txt @@ -767,6 +767,9 @@ Here is an example of such an url: https://sp.example.org/simplesaml/saml2/idp/SSOService.php?spentityid=dev.andreas.feide.no +When the IdP-first flow is used an extra parameter is needed in the `saml20-sp-hosted` metadata. This is the `RelayState` parameter that tells the SP which URL to redirect the user to after the user is successfully authenticated. This typically is the frontpage of your application. An example of this can be: + + 'RelayState' => '/', B. Writing your own authentication module