Unable to parse SAML attributes and redirecting the request back to the URL

Cantor, Scott cantor.2 at osu.edu
Mon Jul 1 13:35:23 EDT 2013


> But for some reason still not able to fix it. I know Im really close but
> some where some small issue is causing a hiccup.

There is nothing anybody outside of you can do to diagnose a loop unless your system is publically accessible to other people to trace a login attempt and do the job for you.

> I try to access my site and get navigated to the idp and then i enter my
> credentials and then i see the browser goes into a loop of multiple posting.
> I did use fiddler and attached the image of continuous loop.

Nobody is disupting there's a loop. The reasons most loops occur are in the wiki and involve vhost mismatches between the resource and the POST location for the SAML response, and if it's not that, you are into very unusual territory that is not going to be detectable by anybody here. It could be network level issues involving client address inconsistency or something equally obscure.

> I'm also attaching my shibboleth2.xml to show my cookieprops attribute
> configuration.

The only person who can determine its proper value is you. If there's no path specified, then the only thing that matters is http/https mismatches, which does not appear to be the case.

> Please let me know where im going wrong.

I did, but you want a magic answer and there isn't one. If you don't have the HTTP expertise to trace this, you may need to find somebody local who does.

-- Scott





More information about the users mailing list