<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://shibboleth.atlassian.net">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0" bgcolor="#f5f5f5"> <!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="https://secure.gravatar.com/avatar/0947f5a8dc1c7303cb2651ceb38553e2?d=https%3A%2F%2Favatar-management--avatars.us-west-2.prod.public.atl-paas.net%2Finitials%2FHY-3.png" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="557058:00a92469-174a-4a39-aeba-4b46d2cb20be" style="color:#3b73af;; color: #3b73af; text-decoration: none" id="email_557058:00a92469-174a-4a39-aeba-4b46d2cb20be" href="https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A00a92469-174a-4a39-aeba-4b46d2cb20be"> Hong Ye </a> <strong>commented</strong> on <a href="https://shibboleth.atlassian.net/browse/IDP-1859?atlOrigin=eyJpIjoiMzk4NDNjNjI5YzA5NGY4MWEyMWU4Yzg0MWFmYjUyODMiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-764c172e-f9ba-4872-9042-48c72ff7f2a0" height="16" width="16" border="0" align="absmiddle" alt="Task"> IDP-1859</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; border-spacing: 0; border-collapse: separate">
<tbody>
<tr> <!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td style="vertical-align: top;; padding: 0; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://shibboleth.atlassian.net/browse/IDP-1859?atlOrigin=eyJpIjoiMzk4NDNjNjI5YzA5NGY4MWEyMWU4Yzg0MWFmYjUyODMiLCJwIjoiaiJ9" style="color: #3b73af; text-decoration: none">Re: strange IDP SSO session</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; border-bottom: none; padding-bottom: 0" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0; border-collapse: collapse; padding: 0 0 10px"> <p style="margin: 10px 0 0; margin-top: 0">Hi Scott,</p> <p style="margin: 10px 0 0">Could you let me know how to access member project for support?</p> <p style="margin: 10px 0 0">Thanks,<br> Hong</p> <p style="margin: 10px 0 0">On 8/27/21, 8:49 AM, "Scott Cantor (Jira)" <jira@shibboleth.atlassian.net> wrote:</p> <p style="margin: 10px 0 0"> [ <a href="https://shibboleth.atlassian.net/browse/IDP-1859?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=31319#comment-31319" class="external-link" rel="nofollow noreferrer" style="color: #3b73af; text-decoration: none">https://shibboleth.atlassian.net/browse/IDP-1859?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=31319#comment-31319</a> ] </p> <p style="margin: 10px 0 0"> Scott Cantor commented on IDP-1859:<br> -----------------------------------</p> <p style="margin: 10px 0 0"> This isn’t really a bug report. If you’re looking for support, please use the member project for that and you would need to attach the actual logs. The audit log is not going to help diagnose anything about how the IdP is behaving, and generally “I had to log in” won’t show up in any log because it’s indicative of the absence of a session, which isn’t really all that visible.</p> <p style="margin: 10px 0 0"> > strange IDP SSO session<br> > -----------------------<br> ><br> > Key: <span class="jira-issue-macro resolved" data-jira-key="IDP-1859"> <a href="https://shibboleth.atlassian.net/browse/IDP-1859" class="jira-issue-macro-key issue-link" title="strange IDP SSO session" style="color: #3b73af; text-decoration: none"> <img class="icon" src="https://shibboleth.atlassian.net/secure/viewavatar?size=medium&avatarId=10318&avatarType=issuetype"> IDP-1859 </a> <span class="aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf" style="background: #cccccc; border: 1px solid #cccccc; border-radius: 3px; color: #333333; display: inline-block; font-size: 11px; font-weight: bold; line-height: 99%; margin: 0; padding: 2px 5px; text-align: center; text-decoration: none; text-transform: uppercase; background-color: #ffffff; border-color: #cccccc; color: #333333" bgcolor="#ffffff">Closed</span> </span> <br> > URL: <a href="https://shibboleth.atlassian.net/browse/IDP-1859" class="external-link" rel="nofollow noreferrer" style="color: #3b73af; text-decoration: none">https://shibboleth.atlassian.net/browse/IDP-1859</a><br> > Project: Identity Provider<br> > Issue Type: Task<br> > Components: Configuration<br> > Affects Versions: 4.0.1<br> > Reporter: Hong Ye<br> > Assignee: Scott Cantor<br> ><br> > Hello,<br> > In idp.properties, I have <br> > idp.session.timeout = PT10H<br> > idp.authn.defaultLifetime = PT10H<br> > idp.authn.defaultTimeout = PT10H<br> > With this setting, I think in the same browser, I just need to login to IDP once. then I'll have active IDP session for 10 hours. With active IDP session, I won't be prompted for login when accessing other websites as long as that site doesn't require forceAuth. I did some testing, I can't explain the behavior. Here is my test:<br> > 1. Accessed whoiam.cornell.edu which has shbboleth SP installed <br> > 2. Prompted for login at Cornell IDP. Logged in<br> > 3. whoiam.cornell.edu displayed to me.<br> > 4. Deleted shibSession cookie at whoiam.cornell.edu domain. Then refresh whoiam.cornell.edu. I wasn't prompted for login, SSO worked for me. Deleted shibSession cookie again, refresh whoiam.cornell.eud, I was prompted for login. I don't understand why the second time I was prompted for log in. Do I miss anything in IDP <br> > configuration?<br> > Here is IDP audit log:<br> > 2021-08-26T20:32:23.028-0400|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|https://www.whoiam.cornell.edu/shibboleth|http://shibboleth.net/ns/profiles/saml2/sso/browser|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|urn:oasis:names:tc:SAML:2.0:status:Success|||false|hy93|https://refeds.org/profile/mfa|<br> > 2021-08-26T20:32:59.698-0400|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|https://www.whoiam.cornell.edu/shibboleth|http://shibboleth.net/ns/profiles/saml2/sso/browser|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|urn:oasis:names:tc:SAML:2.0:status:Success|||true|hy93|https://refeds.org/profile/mfa|<br> > 2021-08-26T20:35:28.176-0400|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|https://www.whoiam.cornell.edu/shibboleth|http://shibboleth.net/ns/profiles/saml2/sso/browser|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|urn:oasis:names:tc:SAML:2.0:status:Success|||false|hy93|https://refeds.org/profile/mfa|<br> > Thanks,<br> > Hong</p> <p style="margin: 10px 0 0"> –<br> This message was sent by Atlassian Jira<br> (v1001.0.0-SNAPSHOT#100175)</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff"> <script type="application/ld+json">
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"description": "View Issue",
"potentialAction": {
"@type": "ViewAction",
"target": "https://shibboleth.atlassian.net/browse/IDP-1859?inbox=true&focusedCommentId=31321&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#comment-31321",
"name": "View Comment"
},
"publisher": {
"@type": "Organization",
"name": "Atlassian",
"url": "https://www.atlassian.com"
}
}
</script>
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://shibboleth.atlassian.net/browse/IDP-1859#add-comment?atlOrigin=eyJpIjoiMzk4NDNjNjI5YzA5NGY4MWEyMWU4Yzg0MWFmYjUyODMiLCJwIjoiaiJ9" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-da6d3544-d930-4a0f-a6f0-8b603a5623a3" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://shibboleth.atlassian.net/browse/IDP-1859#add-comment?atlOrigin=eyJpIjoiMzk4NDNjNjI5YzA5NGY4MWEyMWU4Yzg0MWFmYjUyODMiLCJwIjoiaiJ9" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr> <!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="footer-pattern-mobile-separated-links" class="mobile-resize-text" width="100%" colspan="2" style="padding: 0; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> Get Jira notifications on your phone! Download the Jira Cloud app for <a href="https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail" style="color: #3b73af; text-decoration: none">Android</a> or <a href="https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8" style="color: #3b73af; text-decoration: none">iOS</a>
<hr> </td>
</tr>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian Jira <span id="footer-build-information">(v1001.0.0-SNAPSHOT#100175-<span title="6c2908d665f04f7a47397956c6f50e5b3a68bca6" data-commit-id="6c2908d665f04f7a47397956c6f50e5b3a68bca6}">sha1:6c2908d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0; mso-table-rspace: 0">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0; border-collapse: collapse; padding-top: 3px; opacity: 0.150"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-d43da6b4-26a9-4a7a-a427-ca07a9edbf6d" alt="Atlassian logo" title="Atlassian logo" width="192" height="24" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>