Shibboleth SP/Windows 7/Tomcat- Website authenticates with IdP on every new page

[Chris Glaubig]

Hello all,

 

Just about everything seems to be working with Shibboleth how I want it to.

 

The only exception is that whenever I navigate to a new page, I am being
directed back to the IdP and then redirected back to the page that I
originally navigated to.

So, for example, I'll go to my website:

I am redirected to the IdP.  I log in and then I am redirected to my
website.

Whenever I click a link that opens a new page, I am first redirected back to
the IdP, which then will automatically redirect my back to my website
without requiring a login again.

I was expecting that I would authenticate once, and then a cookie would be
generated for the timeout period of time, during which I would not need to
talk to the IdP server.

 

Can anybody point me in the right direction as to why this happens?

 

I attached my Shiboleth2.xml file to this email, but just in case, here is
it is below as well:

 

 

Thanks in advance,

 

-Chris

 

 

 

<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"

    xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"

    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"

    xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"    

    xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"

    clockSkew="180">

 

   

    <InProcess logger="native.logger">

        <ISAPI normalizeRequest="true" safeHeaderNames="true">

           

            <Site id="1" name="domain.com" scheme="https" port="443"/>

           

        </ISAPI>

    </InProcess>

 

    

    <RequestMapper type="Native">

        <RequestMap>

            

                    <Host name="domain.com" authType="shibboleth"
requireSession="true" />

               

                

        </RequestMap>

    </RequestMapper>

 

    <ApplicationDefaults entityID="https://domain.com/shibboleth"

                         REMOTE_USER="eppn persistent-id targeted-id">

 

     

        <Sessions lifetime="43200" timeout="9000" relayState="ss:mem"
checkAddress="false" handlerSSL="false" cookieProps="http">

 

          

            <SSO entityID="https://idp-stage.domain.edu/idp/shibboleth"

                 discoveryProtocol="SAMLDS"
discoveryURL="https://ds.example.org/DS/WAYF">

              SAML2 SAML1

            </SSO>

 

            <Logout>SAML2 Local</Logout>

 

            <Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>

 

            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>

 

            <Handler type="Session" Location="/Session"
showAttributeValues="false"/>

 

            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>

        </Sessions>

 

       

        <Errors supportContact="email at domain.edu"

            helpLocation="/about.html"

            styleSheet="/shibboleth-sp/main.css"/>

        

        

        <MetadataProvider type="XML" file="idp-metadata.xml"/>

       

 

        <AttributeExtractor type="XML" validate="true" reloadChanges="false"
path="attribute-map.xml"/>

        

        <AttributeResolver type="Query" subjectMatch="true"/>

 

        <AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>

 

        <CredentialResolver type="File" key="sp-key.pem"
certificate="sp-cert.pem"/>

 

    </ApplicationDefaults>

    

    <SecurityPolicyProvider type="XML" validate="true"
path="security-policy.xml"/>

 

    <ProtocolProvider type="XML" validate="true" reloadChanges="false"
path="protocols.xml"/>

 

</SPConfig>

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121010/f40ebbf0/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: shibboleth2.xml
Type: text/xml
Size: 7633 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20121010/f40ebbf0/attachment-0001.xml