Query on ECP implementation

[Cantor, Scott]

> I authenticated a user using ECP and got the response back, then i made
> another AuthnRequest for the same user this time with the NameId
> returned in the earlier AuthnResponse and without the authorization
> header.

Then you obviously returned the cookie.

> I get the refreshed attributes, exactly what i want. Now if i have 2
> active user sessions and i try to get the refreshed attributes with the nameid,
> i get an unexpected error with the log "A non-proceed event occurred while
> processing the request: InvalidSubjectContext". It is fetching the principal
> from the last authenticated session. It seems like idp only maintains single
> session, that of the last authenticated user. Please refer last 7 lines in the
> logs below.

If you want to manage multiple sessions then you have to manage multiple cookies. You can't act as a multi-threaded, multi-session client without regard for the fact that you're doing that.

-- Scott