{
"audience": "https://billing.zohosecure.com/accounts/csamlresponse/10012345677",
"recipient": "https://billing.zohosecure.com/accounts/csamlresponse/10012345677",
"mappings": {
"email": "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress",
"relayState": "aHC9kYWF4dGVfjhfkjhfjkhdjkfhfR5lsdjT45pvaG9Cb29rcwR0cHM6Ly9iaWxsaW5nLnpvaG9zZWN1cmUuY29tL3BvcnRhb=="
},
"signResponse": true,
"destination": "https://billing.zohosecure.com/accounts/csamlresponse/10012345677",
"nameIdentifierFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:emailaddress",
"nameIdentifierProbes": [
"http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
]
}
Welcome to the Auth0 Community!
Hopefully my understanding of your use case is correct, in cases of IdP-Initiated SSO where Auth0 is the IdP, you need to navigate the user to the URL from the SAML2 Web App Addon → Usage tab, marked as Identity Provider Login URL.
In cases where the SP requires the RelayState, you can add the parameter manually to that link on the application side:
https://[your_domain]/samlp/[your_client_id]?RelayState=[the_desired_final_url_at_the_sp]
where:
[your-domain] - is your Auth0 canonical or Custom Domain;
[your_client_id] - is the client ID from the application you created to represent the SAML service provider for which you want to trigger the IdP-initiated login;
[the_desired_final_url_at_the_sp] - is the encoded URL to which you would want the service provider to navigate the user after receiving and validating the authentication.
Information was pulled from the solution on the following topic : Auth0 as Identity Provider Where IdP Initiates SSO - #3 by jmangelo
If you have a different use case, please let me know so we can further look into the matter.
Hope this helped!
Gerald
Thanks @gerald.czifra adding relayState worked to log me in to my sp.
But when I’m logging out it logs me out from SP and displays blank white page with ‘Not Found.’
My current logout url is “https://{auth0Domain}.us.auth0.com/v2/logout”
can we set a proper redirect url post logout.