IDP v3 Double Login

Cantor, Scott cantor.2 at
Tue Aug 4 13:13:49 EDT 2015

On 8/4/15, 1:08 PM, "users on behalf of McKean, Brandon Scott - mckeanbs" <users-bounces at on behalf of mckeanbs at> wrote:

>I'm not entirely sure how to tell that. But if it's where you would see "InitializeAuthenticationContext" in the logs on such a request, then yes, there are 2 requests, behavior that I don't see in the log when I try another SP.

There should be two audit log entries for these requests, and two web access log records for a GET to the Shibboleth/SSO endpoint with the appropriate parameters.

In which case, there's no way for the IdP to do anything about it unless the SP operator can explain why it's not happy with the first response.

-- Scott

More information about the users mailing list