...
When configuring Shibboleth SP to use a PingFederated (PingIdentity) IdP, do not use the "/idp/startSSO.ping" endpoint as this is a proprietary Ping endpoint for IdP-Initiated SSO which is not for SAML 2 requests and will drop the RelayState parameter. Use the "/idp/SSO.saml2" endpoint for expected Shibboleth SP behavior.