IdP 2.4 Cookie Handling Error

[Cantor, Scott]

On 7/17/14, 11:21 AM, "Paul Hethmon" <paul.hethmon at clareitysecurity.com>
wrote:
>
>Driving my customers crazy.

As far as I've ever been able to tell, my users weren't regularly seeing
the results of this, so I concluded that the case that caused it was some
kind of browser anomaly that didn't actually affect users. But of the two
outcomes, I would expect that being able to control this at the IdP is
much better than the random outcome you'd get from an application.

>Has anyone tracked down a reason for this behavior with IE? Something
>that can be changed server side to deal with it?

I haven't ever tracked it down. It was speculation on my part what was
causing the empty responses, and I couldn't find any other explanation but
that spot in the code. I can't come up with any scenario from a browser
that should lead to it. Even if the cookie jar were full, it should fail
earlier.

-- Scott