sp4a1, SubjectConfirmationData/@InResponseTo did not match the valid value: null

[Peter Schober]

Scott Cantor via dev <dev at shibboleth.net> [2026-03-11 19:43 CET]:
> What you might do is change the sp.cookieMaxAge setting and not use
> -1 there, and see what happens if it's set to 300 or something.

I didn't even notice the property sp.cookie.MaxAge existed. :(
But yes, setting this to 300 does set the cookie with that value, the
message "No correlation cookie found for state token" is gone and
processing continues even w/o disabling sp.saml.checkInResponseTo.

> Is this Jetty or Tomcat?

Latest Tomcat 11 (11.0.18 at the time I installed last week), sorry.

I had created documentation for using the IDP with Tomcat on Debian
that I could quickly adapt to RHEL-clones. I can try with Jetty and
the IDP plugin for it, later.
-peter