RE: [saml-dev] RelayState encoding in POST binding

> It's clearly stated in the SAML 2.0 specification that RelayState needs
> to be URL encoded in Redirect binding, but what's the situation in POST
> binding?

The browser handles the encoding during form submission, it just has be
HTML-safe like any other field content in an HTML page.

-- Scott