IdP-initiated_Single_Sign_ON

To enable IdP-initiated Single Sign On via Shibboleth the RelayState URL must end with "/shib/".

Example: 

https://www.mycompany.com/openolat/shib/

This allowed an end user to go straight from the identity provider portal to their home page within OpenOlat.

For more discussion on this see https://groups.google.com/d/msgid/openolat/833692f7-0551-484c-94d9-bdef388f18b8%40googlegroups.com?utm_medium=email&utm_source=footer