| Peter Palaga, we fixed an issue where the destination was not being validated. Something mandatory in the specs. The ServiceURL is pretty much the SP identifier, an URI, used to check not only the destination but the redirect uri that should be used by the IdP to send messages. I would say that making ServiceURL does not make much sense. Best is try to adhere to the current behavior. In any case, the change is a RFE. It would require changing code to consider multiple URLs for validation and one of them as the redirection point. |
