Problem with multiple "home" pages protected by shibboleth

[Lipscomb, Gary]

Hi Sam,

If you open the first application in the first tab, get redirected to the shibboleth login page, enter credentials, authenticate successfully, you are presented with the home page of the application.
If you then open a 2nd tab, enter the url of the 2nd application, you are automatically logged into the 2nd app via shibboleth SSO. This works for all subsequent tabs.
The issue is when you have the home page of the applications set to open in separate tabs on browser startup.


Gary


From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Sam Wilson
Sent: Monday, 10 February 2014 16:35
To: Shib Users
Subject: Re: Problem with multiple "home" pages protected by shibboleth

Hi Gary,

Sounds to me like the browsers are showing cached pages hence your getting no login contexts unless the page is active. Have you confirmed logging into a singe tab then iterating though each application?

Cheers,

Sam

On Mon, Feb 10, 2014 at 12:54 PM, Lipscomb, Gary <glipscomb at csu.edu.au<mailto:glipscomb at csu.edu.au>> wrote:
Hi,

In the latest browsers users are able to open multiple startup pages on different tabs. These are set to be the home page for the different applications (not the login page).  All these applications are protected by shibboleth and the IdP login page is presented in each of the tabs. The tab displays that they are logging into the requested application.
They are able to authenticate correctly on the first tab, but on the other tabs authentication fails. The error in the idp-process.log [1] is below. Regardless of which tab they authenticate against, it is the last tab/application that was opened they are logged into.

This can also be replicated by opening up different tabs, but not logging in to the application, then logging into one of the tabs.

I don't think there is a solution, but could be wrong. Any ideas?


[1] idp-process.log
12:53:55.062 - WARN [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:147] - No login context available, unable to return to authentication engine


thanks

Gary Lipscomb
Enterprise Solutions Architect (Infrastructure) | Division of Information Technology
Charles Sturt University
Panorama Avenue
Bathurst, NSW 2795
Australia

[cid:image001.png at 01CF2702.9BFA6550]<http://www.csu.edu.au/>

|   ALBURY-WODONGA   |   BATHURST   |   CANBERRA   |   DUBBO   |   GOULBURN   |   MELBOURNE   |   ONTARIO   |   ORANGE   |   PORT MACQUARIE   |   SYDNEY   |   WAGGA WAGGA   |

________________________________
LEGAL NOTICE
This email (and any attachment) is confidential and is intended for the use of the addressee(s) only. If you are not the intended recipient of this email, you must not copy, distribute, take any action in reliance on it or disclose it to anyone. Any confidentiality is not waived or lost by reason of mistaken delivery. Email should be checked for viruses and defects before opening. Charles Sturt University (CSU) does not accept liability for viruses or any consequence which arise as a result of this email transmission. Email communications with CSU may be subject to automated email filtering, which could result in the delay or deletion of a legitimate email before it is read at CSU. The views expressed in this email are not necessarily those of CSU.

Charles Sturt University in Australia<http://www.csu.edu.au> The Grange Chancellery, Panorama Avenue, Bathurst NSW Australia 2795 (ABN: 83 878 708 551; CRICOS Provider Number: 00005F (National)). TEQSA Provider Number: PV12018
Charles Sturt University in Ontario<http://www.charlessturt.ca/> 860 Harrington Court, Burlington Ontario Canada L7N 3N4 Registration: www.peqab.ca<http://www.peqab.ca>
Consider the environment before printing this email.

Disclaimer added by CodeTwo Exchange Rules 2007
www.codetwo.com<http://www.codetwo.com>


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140211/0b9f8d10/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 7102 bytes
Desc: image001.png
Url : http://shibboleth.net/pipermail/users/attachments/20140211/0b9f8d10/attachment-0001.png