How to disable RelayState validation

According to Saml2 standard, Relaystate’s size must be less than 80 bytes. Because there are several SAML 2.0 implementations out there have a bad habit of using long relay state, we implemented a DisableRelayStateSizeValidation switch that you can find in the [tenant]\runtime\web.config file. It it value is set to true, validation will be disabled. If it is false or not exist, validation is done normally.

An IIS reset is required to make the change take effect.

Was this helpful ?Good Somewhat Bad