title: ADFS relaystate redirection not working with idp initiated sign on with another provider
body: <p>We have set up identity federation between our ADFS environment and another IDP (Siteminder I think).
  Both SP and IDP initiated sign on are working fine.
  Now, we want to provide all users a link that authenticates them through idp initiated sign on and redirects them to a specific Url.
  Our identity provider suggests that we add the <code>RelayState</code> query parameter to the end of the idp initiated sign on request, to have this request : </p>
  
  <pre><code>https://&lt;idp-sso-endpoint&gt;?SPID=https://&lt;adfs-server&gt;/adfs/services/trust&amp;amp;ProtocolBinding=urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST&amp;RelayState=&lt;target-url&gt;
  </code></pre>
  
  <p>but the following error occurs on our adfs server :</p>
  
  <blockquote>
    <p>Microsoft.IdentityServer.Web.CookieManagers.InvalidContextException:
    MSIS7001: The passive protocol context was not found or not valid. If
    the context was stored in cookies, the cookies that were presented by
    the client were not valid. Ensure that the client browser is
    configured to accept cookies from this website and retry this request</p>
  </blockquote>
  
  <p>Does anyone have an idea how to use the RelayState parameter with and IDP and ADFS as a service provider ?</p>
  
  <p>Thanks.</p>