IDP v3 Double Login

[Cantor, Scott]

On 8/4/15, 1:08 PM, "users on behalf of McKean, Brandon Scott - mckeanbs" <users-bounces at shibboleth.net on behalf of mckeanbs at jmu.edu> wrote:

>I'm not entirely sure how to tell that. But if it's where you would see "InitializeAuthenticationContext" in the logs on such a request, then yes, there are 2 requests, behavior that I don't see in the log when I try another SP.

There should be two audit log entries for these requests, and two web access log records for a GET to the Shibboleth/SSO endpoint with the appropriate parameters.

In which case, there's no way for the IdP to do anything about it unless the SP operator can explain why it's not happy with the first response.

-- Scott