IDP v3 Double Login
cantor.2 at osu.edu
Tue Aug 4 12:54:25 EDT 2015
On 8/4/15, 12:44 PM, "users on behalf of McKean, Brandon Scott - mckeanbs" <users-bounces at shibboleth.net on behalf of mckeanbs at jmu.edu> wrote:
>I think I understand what you mean here. From what I can tell from the logs, it goes through all the way through to "record response complete", and then it starts anew with another AttributeQuery. Am I understanding correctly that that portion is another request to it?
Not the one I'm talking about. If it's a SAML 1 SP, and you're not pushing attributes, then yes, it will query for them. That's back channel, there's no user involved.
I'm talking about two explicit requests for authentication, front channel.
>Unfortunately there doesn't seem to be a difference between them at that portion.
But are there two authentication requests or not?
More information about the users