saml2 idp session was not set on the first saml request

[Cantor, Scott]

On 4/23/14, 4:46 PM, "XiaoXia Dong" <x-dong at northwestern.edu> wrote:

>I have  a strange problem with one of our app. After tracing the saml and
>http header, I could see that my instance is not working for first time
>user access because saml request does not set the _idp_session. Only
>after the user logged in, and manual post the vendor login URL again,
>that is when it worked.

Also, please explain what "worked" means, or rather what "not worked"
means. I still don't know what it is that it's doing. Presumably not
sending the reponse back and redirecting the browser back to the SP. So
where is it stopping and what does the log say it's doing?

And is there anything unusual about the link that started things off or
where it was placed? Like, say, from an Office document or something like
that?

-- Scott