IE and Shibboleth.sso/SAML2/POST

Yannick Béot yannick.beot at gmail.com
Wed Oct 24 17:46:26 EDT 2012


The IE errors is not very meaningfull because IE can be tricky :)
I mean the URL in the address bar might not be correctly refreshed. You
should use a plugin like Fiddler (
http://www.fiddler2.com/Fiddler2/version.asp) and trace the request to be
sure where you end up actually.

SAML Protocol define that the relay state must not exceed 80
characters. It is weird that you have this kind of error.
Shibboleth relaystate, when using the default "mem" (in memory) relaystate
generator, is pretty short.
Did you change anything about the relay state?


On Wed, Oct 24, 2012 at 11:11 PM, delosrec <delosrec at imsweb.com> wrote:

> Thanks for the replies.
>
> Scott, would the error occur on the SP or IDP side? I've looked through
> them
> (all of them, I think) and the only line I could find that wasn't of type
> INFO was:
>
> WARN [org.opensaml.saml2.binding.encoding.BaseSAML2MessageEncoder:133] -
> Relay state exceeds 80 bytes, some application may not support this.
>
>
>
>
> Yannick, they see the following:
> <http://shibboleth.1660669.n2.nabble.com/file/n7582673/Capture.png>
>
>
>
> --
> View this message in context:
> http://shibboleth.1660669.n2.nabble.com/IE-and-Shibboleth-sso-SAML2-POST-tp7582670p7582673.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121024/fbb560ba/attachment.html 


More information about the users mailing list