"Rejecting replayed message ID" for iOS Native Application when using webview element

mattzard mgrovesx at googlemail.com
Wed Jun 12 11:21:40 EDT 2019


I have an issue with an iOS Native Application using a webview element. My
SAML URL has been placed into the webview element, but it is raising the
following errors:

	2019-06-12 10:10:43 INFO Shibboleth.SessionCache [5] [default]: new session
created: ID (x) IdP (x) Protocol(urn:oasis:names:tc:SAML:2.0:protocol)
Address (x)
	2019-06-12 10:10:43 ERROR OpenSAML.SecurityPolicyRule.MessageFlow [6]
[default]: replay detected of message ID (x)
	2019-06-12 10:10:43 WARN Shibboleth.SSO.SAML2 [6] [default]: error
processing incoming assertion: Rejecting replayed message ID (x).

If I use the same SAML URL within an external browser on the same device,
the errors are not raised and my authentication process completes without
issue. 

Is there a known issue in regards to the webview elements for iOS Native
Applications? Is there anything that I can do to get this working? The issue
appears to be 100% replicable. 



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Developers-f1660781.html


More information about the dev mailing list