Please use the link format below to deep-link into Litmos using ADFS as your SAML IDP
https://*IDP-URL*/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID=https://*LitmosDomain*.litmos.com/integration/splogin&RelayState=https://**LitmosDomain*.litmos.com/course/**COURSE ID**
Please note, the link must be encoded to work properly, below is an example of proper encoding:
https://*IDP-URL*/adfs/ls/idpinitiatedsignon.aspx?RelayState=RPID%3Dhttps%253A%252F%252F*LitmosDomain*.litmos.com%252Fintegration%252Fsplogin%26RelayState%3Dhttps%253A%252F%252F**LitmosDomain*.litmos.com%252Fcourse%252F**COURSE%2520ID**
Customers on our Australian and European Data Centers will need to use their respective Litmos domains (domain.Litmos.com.au, domain.LitmosEU.com)
This is the Deep-Link that can be provided to users. CourseID is found in the course settings. You can also create a Deep-Link to a learning path by using the LearningPathID (Ex: https://**LitmosDomain*.litmos.com/home/learningpath/**Learning Path ID**).
Note: The Course or Learning Path needs to be in the Course Library, or assigned to the learner directly for the redirect to work. If it isn't, the learner will get a lockout error.
Google Chrome Version 85 and greater: Deep Linking with ADFS will not work if your ADFS server has not specified a referrer policy.
Please see the below link to learn about the security changes that Chrome has made in these later versions.
https://developers.google.com/web/updates/2020/07/referrer-policy-new-chrome-default
Chrome has changed the default referral policy (ie: how it behaves if no policy is specified) from "no-referrer-when-downgrade" to "strict-origin-when-cross-origin" in v85 and later version which is why this issue has emerged.
Workaround:
The workaround for this is to disable the referrer option in Chrome and would need to be performed by any user attempting to use a deep link if the ADFS referrer policy is not set.
1) Type chrome://flags
2) Press Enter
3) Search Reduce default "referer" header granularity
4) Select Disable
5) Relaunch the browser and deep links will work.
Otherwise, commands can be run on your ADFS server to set a referrer policy, this may require the assistance of Microsoft support.
Comments
0 comments
Please sign in to leave a comment.