Shib login in pop-up browser window?

[Michael A Grady]

On Oct 14, 2014, at 9:02 PM, Cantor, Scott <cantor.2 at OSU.EDU> wrote:

> On 10/14/14, 9:42 PM, "David Bantz" <dabantz at alaska.edu> wrote:
>> 
>> Should this work?  The vendor tells me they are issuing exactly the same
>> SAML request they do for initial log in (which always works), just doing
>> so through a pop-up window; but users report seeing the common ³error²
>> version of the login page in a pop-up when this occurs.  I¹m hoping to be
>> able to capture the SAML from a user¹s browser when this occurs, but have
>> yet to be given that access...
> 
> Should work if it's not a frame. Capturing the message aside, you really
> need to know what the actual error is.
> 
> -- Scott
> 

If using an iframe for that, then yes, you will get an error in at least several browsers (Safari, IE, Firefox depending on your cookie settings) because they won't accept cookies in the iframe when the origin of the containing window (the vendor) differs from that of the iframe (your login page).

--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.