Uploads over SSL failing after SAML integration

[Cantor, Scott]

On 12/2/12 8:43 PM, "Aaron Howell" <aaron.howell at deakin.edu.au> wrote:

>Just a couple of thought - definitely not sure - hope it helps.
>
>I believe Safari sandboxes flash - maybe some session information is not
>passed across when under SSL
>
>Or maybe the flash component only communicates on HTTP (in which case
>shibboleth might have the session only on https) or something like that.

Yes, you'd certainly want to trace the traffic or examine server logs to
verify that there's actually a session and that it's not responding to the
upload with a 302.

There's also the question of the cookieProps setting, use of HttpOnly in
the default properties, that kind of thing.

But AFAIK, Flash itself would never work. That uses its own HTTP stack and
wouldn't use the cookies from the browser, and would never support SSO. I
suppose maybe that could be browser-specific, but using its own HTTP stack
is pretty universal I think.

-- Scott