Client sent a cookie from address ... but the cookie was issued to address ...

[Chad La Joie]

On Fri, Feb 10, 2012 at 14:29, Turner, Andrew P <A.P.Turner at shu.ac.uk> wrote:
> I also used to see this a lot before we realised that using a SNAT pool on our BIG-IPs didn't also do SNAT persistence, therefore the user sometimes came from a different source address for different requests.

Right, so as far as the IdP was concerned, the client had change IP
address.  There are many reasons this can happen (i.e.,
not-so-transparent HTTP proxies) but as far as the IdP can see: a
clients address changed.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered