Uploads over SSL failing after SAML integration

Cantor, Scott cantor.2 at osu.edu
Mon Dec 3 09:43:28 EST 2012


On 12/3/12 6:45 AM, "MikeWho" <who at me.com> wrote:

>Many thanks Scott, Aaron for the replies.
>
>I think you may be right - with Flash upload (FileReference.upload) in
>certain browsers session/header data may not be present, and so would
>obviously fail in SSO. We're investigating setting requireSession to false
>just for the upload script (not a security issue, since we still have our
>own .Net session).

You could also just turn off the SP entirely for those requests, just set
authType to something different.

>In the RequestMapper, is it possible to have requireSession true for a
>folder, but false for one sub-file? Or do we have to set requireSession to
>false for the entire folder and then true for every file apart from the
>upload script?

The "Path" attribute can refer to either a folder or filename, it's just a
path segment.

-- Scott




More information about the users mailing list