session initiator / wayf question

[Mike Flynn]

Recently, we moved data centers and since that time I have about 4 IDPs with an issue I have not seen before.

I have 1 session initiator in my config.  It's the default one for /Incommon that came with the software.  It has a URL to the InCommon WAYF service.

on SP initiated, if the user omits the providerId value, they go to the wayf page as expected since shib did not get an entityID to match on.

What these customers are seeing is that after they authenticate on the IDP side, an assertion is sent back to us and the user lands on the incommon wayf page as if they had hit the SP init link with no provider ID.

Can anyone offer any insight on this issue?:

THanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141026/be69e488/attachment.html