sp4a1, SubjectConfirmationData/@InResponseTo did not match the valid value: null

[Scott Cantor]

I guess I'll make an executive decision...you can actually poke a test instance of the SP here:

https://sp.testbed.shibboleth.net/cgi-bin/printenv

This was the header trace:

Set-Cookie: __Host-shibsession_64656661756c74=; Max-Age=0; Path=/; Secure=1; HttpOnly=1 __Host-shibsp_req_7d8b70128897521c1014cf67ad94dc42=_dfc279b560d47d0d6733fdcb14a22d28; HttpOnly; Path=/; SameSite=None; Secure

The first one is clearing the long-dead session, but the second one there is the cookie it's issuing for the correlation.

Maybe helpful for comparison.

-- Scott