RE: [saml-dev] "Target" URL's longer that 80 bytes? (was: RE: [saml-dev] SAML 1.1 Artifact Profile -> SAML 2.0 - missing TARGET attribute)

> Since it is normally an SP that creates the relay state which 
> it then looks at when it comes back from the IDP, you could 
> avoid sending the entire URL as RelayState by saving it in a 
> table and sending a short handle as the RelayState.  When the 
> handle comes back to the SP, just look up the associated 
> saved value.  Of course, this means maintaining (presumably 
> short-lived) state at the SP, but that's one alternative.

Note that the SP can also just as easily use a cookie to carry
this information.  That way it is stored in the client.  

Conor