IdP 2.4 Cookie Handling Error

[Tom Poage]

Are frames involved? As I recall, we saw something roughly similar testing IE 11 with a dev instance of ServiceNow. The authN was attempting to be done in a frame, and recall it appeared to work with FF, Chrome and earlier versions of IE. Although I found a way to to override in the browser settings, though that's obviously not scalable, and I told the developer trying to do that was a Bad Idea (TM) wrt security; think they found a workaround.

Tom.

On Jul 17, 2014, at 8:59 AM, Paul Hethmon <paul.hethmon at clareitysecurity.com> wrote:
> On Jul 17, 2014, at 11:47 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>>> I think in our environment, the empty response sent to the SP just
>>> resulted in a new AuthnRequest.
>> 
>> I would have thought that would loop. If not, that means the issue isn't
>> even repeatable.
> 
> Our QA team has not been able to reproduce it at all. If the user switches to FF or Chrome, it never happens. But we still have a few SPs that are IE only.