How to Pass RelayState from an Identity Provider (IDP) in Salesforce SAML Single Sign-On (SSO)

How RelayState Works in Salesforce SSO

RelayState is sent as an HTTP query parameter in the IDP-initiated login URL. After a user successfully authenticates with the Identity Provider, Salesforce reads the RelayState value and redirects the user to the specified Salesforce page.

Steps to Configure RelayState in Your IDP

To direct users to a specific Salesforce page after login, append &RelayState= to the end of your IDP-initiated login URL. The value must be a valid Salesforce relative URL (a path within your Salesforce org).
Example:
If your IDP-initiated login URL is: `
To redirect users to a Visualforce page named "test" after login, append the RelayState parameter: `<REDACTED>

Important Limitations

• RelayState must be a valid Salesforce (SFDC) URL. External URLs (pointing to sites outside your Salesforce org) will fail with an "Invalid Page Redirection" error.
• This behavior is specific to configurations where Salesforce is acting as the Service Provider (SP), not as the Identity Provider.
• If your RelayState value is returned as null or empty by the IDP, refer to the related article below.