Issue:
Customers are being contacted by Houghton Mifflin Harcourt that the SAML webApp configured in Unified Workspace, for ThinkCentral, is not sending a RelayState. They are stating that UW needs to be configured to send a RelayState, or they will have to discontinue service for security purposes.
Solution:
It appears that possibly during an upgrade the HMH SAML webApp is being switched from being configured as Service Provider initiated (sends a RelayState), to Identity Provider-initiated (does not send a RelayState).
To correct the webApps settings:
- Open the webAdmin Dashboard.
- Browse to the webApp object.
- Select the Authentication tab.
- Select the Service Provider initiated radio button.
(The Audience field will be hidden, but still used.) - Save the change.
Once the webApp reloads on all of the servers, it will begin to send the RelayState to HMH.