Problems linking to a shib protected image server

[Cantor, Scott]

On 1/17/14, 1:55 PM, "Joseph Areeda" <jareeda at exchange.fullerton.edu>
wrote:
>
>The problem occurs when one page has multiple images and the user does
>not yet have a session with the SP.  The best we can determine the
>problem is browsers open all the links in parallel and the SP is unable
>to actually get a session.  Usually the wiki page being opened has
>established a session with the same IdP so there's no user interaction
>to create the SP's session.

There's no way to do that unless the surrounding page ensures a session is
in place, that's true with all SSO systems unless the authentication
mechanism is known to the browser and not a form.

>Does anyone have a suggestion for how to better deal with this problem?

Well, yes, you can't do this. The protected resource needs to host the
surounding HTML, not something else. Or you proxy it.

-- Scott