IDP v3 Double Login

Cantor, Scott cantor.2 at
Tue Aug 4 12:54:25 EDT 2015

On 8/4/15, 12:44 PM, "users on behalf of McKean, Brandon Scott - mckeanbs" <users-bounces at on behalf of mckeanbs at> wrote:
>I think I understand what you mean here. From what I can tell from the logs, it goes through all the way through to "record response complete", and then it starts anew with another AttributeQuery. Am I understanding correctly that that portion is another request to it?

Not the one I'm talking about. If it's a SAML 1 SP, and you're not pushing attributes, then yes, it will query for them. That's back channel, there's no user involved.

I'm talking about two explicit requests for authentication, front channel.

>Unfortunately there doesn't seem to be a difference between them at that portion.

But are there two authentication requests or not?

-- Scott

More information about the users mailing list