sp4a1, SubjectConfirmationData/@InResponseTo did not match the valid value: null

[Scott Cantor]

> Latest Tomcat 11 (11.0.18 at the time I installed last week), sorry.
> 
> I had created documentation for using the IDP with Tomcat on Debian
> that I could quickly adapt to RHEL-clones. I can try with Jetty and
> the IDP plugin for it, later.

It's hard to imagine Tomcat would be somehow not following the Servlet API on this, that API has been stable in that area for decades now.

But it seems like that's what's going on.

Except...the IdP now does this already, as we primarily use session cookies. I'll double check, but I'm pretty sure we're setting it to -1 internally there also, this is actually the same code of course.


-- Scott