3043211 - SuccessFactors deep link shows "Invalid Login" error when IAS is acting as Proxy for Corporate IdP

• With IAS acting as proxy for Corporate IdP, Invalid Login error shown to end user when accessing SuccessFactors via any deep link.
• The error only appears when the user open the deep link without being logged in the instance previously.
• SSO error logs show:
  • "The RelayState [] is invalid. It must start with '/' or be a valid URL and from a safe domain" OR
  • "The redirectUrl [] is invalid. It must start with '/' or be a valid URL.@sf_validate"

• SAP SuccessFactors HCM Suite
• Identity Authentication Service

deeplink error, deep link, deeplink, invalid login, RelayState, Relay State, Deep Link ,safe domain, safe, domain, redirectUrl, sf_validate, error, IAS, login error, IdP, , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IDS , Identity Authentication Service , Problem