session initiator / wayf question

[Nate Klingenstein]

Mike,

I'd give you 10:1 odds that you're just having session creation issues due to cookies at the SP.  Your infinite loop happens to include a WAYF as one of the steps.

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping

If that's not it, then you could check the RelayState coming back to try to determine why the user is getting redirected there.

Hope this helps,
Nate.

On Oct 26, 2014, at 10:05 AM, Mike Flynn <shibbolethlynda at yahoo.com<mailto:shibbolethlynda at yahoo.com>> wrote:

What these customers are seeing is that after they authenticate on the IDP side, an assertion is sent back to us and the user lands on the incommon wayf page as if they had hit the SP init link with no provider ID.

Can anyone offer any insight on this issue?:


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141026/543eca87/attachment.html