shibstate cookie

[Pottinger, Hardy J.]

Hi, I have a bit of code I work on [1] which leverages a WAYF page to provide a branch point in a login process where the user can opt in to Shibboleth authentication, or application-based authentication. Up until very recently, it worked great. However, we finally upgraded this server to a current version of Shibboleth, and I've discovered that the shibstate cookie, which my hacked version of the WAYF page utilized in order to pass off the user to the correct URL on the application server, is now no longer being set. I'm wondering if someone can help me figure out where this data might now reside? I'm assuming it's a POST variable. And, given enough time digging around in Shibboleth sessions I'm sure I'll find it, but, I'm hoping maybe someone can just point me in the right direction?

To keep things simple, here's exactly what I'm after: the URL which the user visited which started the authentication process.

Googling around, I can see the shibstate cookie was the focus of some bug fixes, so, I'm assuming it's gone for good.

Thanks for your help!

--Hardy

[1] https://github.com/umlso/WAYF/blob/master/WAYF