IdP 2.4 Cookie Handling Error

[Paul Hethmon]

So I've been rolling out IdP updates using 2.4 as the core over the last few months. One new change noted here:

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigurationChanges#IdPConfigurationChanges-Cookie-RelatedErrorHandlingChange

Seems to be biting me big with Internet Explorer users.

The crux of the problem is the browser not sending the Shib session cookie for some reason (and that seems very IE specific). In the 2.3 release Shib would send an empty SAML Response to the SP, but now stops with the error message:

Authentication failure, session missing during completion of profile handler

Driving my customers crazy.

Has anyone tracked down a reason for this behavior with IE? Something that can be changed server side to deal with it?

thanks,

Paul

Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140717/9bd5401b/attachment-0001.html