ApplicationOverride and ECP

[Scott Koranda]

> I think this may be the same issue that we were looking into with
> ScottC's help. I'm out of the office until mid-december so I can't
> test much more but if you look in the archives around 11/15 for a
> thread titled "Re: Delegated Auth with" there is a .cpp file that I
> was trying to add more debugging to (with no success as I have
> little C++ background and my logging was causing segfaults). Scott's
> guess at that point was that the ECP flag was not getting set
> correctly for app override blocks.

Thanks. I read the thread and agree that it sounds much like
the same issue.

With more testing I have found that if in the <Sessions>
element inside of the <ApplicationOverride> element I include
this single child element

<md:AssertionConsumerService Location="/SAML2/ECP" index="4" Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS"/>

the issue goes away.

Please let me know if I can assist with debugging in a
specific way.

Thanks,

Scott K