SP knocking on /profile/SAML2/Redirect/SSO periodically

[Mark Cairney]

Hi,

I've noticed this behaviour and was wondering if a) there's anything to 
worry about and b) if there's anything that can be done to prevent it.

Our Shib IdP uses the RemoteUser handler with the URL protected by 
CoSign (we do have goot reasons for doing things this way).

A particular SP seems to be generating connection attempts every 5 
seconds. What I think has happened is that their Cosign session has 
expired and the Web Application associated with it is attempting to 
reauthenticate or refresh itself.

Having had a chat with one of the users who was exhibiting this 
behaviour they were using IE10 and Chrome but I've had reports of the 
same behaviour with Firefox users as well.

The SP in question is an in-house application running on Windows and I 
think is still using 2.4.3. Could this be a factor?

apollo 1007# grep 129.215.xxx.yyy idp-process.log
<---SNIP --->
09:17:02.523 - INFO [Shibboleth-Access:74] - 
20130314T091702Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
09:17:07.525 - INFO [Shibboleth-Access:74] - 
20130314T091707Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
09:17:12.530 - INFO [Shibboleth-Access:74] - 
20130314T091712Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
09:17:17.528 - INFO [Shibboleth-Access:74] - 
20130314T091717Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
09:17:22.534 - INFO [Shibboleth-Access:74] - 
20130314T091722Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
09:17:27.529 - INFO [Shibboleth-Access:74] - 
20130314T091727Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
09:17:32.530 - INFO [Shibboleth-Access:74] - 
20130314T091732Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
09:17:37.536 - INFO [Shibboleth-Access:74] - 
20130314T091737Z|129.215.xxx.yyy|idp.ed.ac.uk:443|/profile/SAML2/Redirect/SSO|
apollo 1007# grep 129.215.xxx.yyy idp-process.log |wc -l
6693
apollo 1008# grep 129.215.zzz.nnn idp-process.log |wc -l
6692
apollo 1009# grep '\/profile\/SAML2\/Redirect\/SSO' idp-process.log |wc -l
14150
-- 
/****************************

Mark Cairney
ITI UNIX Section
Information Services
University of Edinburgh

Tel: 0131 650 6565
Email: Mark.Cairney at ed.ac.uk

*******************************/

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.