Latest Chrome breaks SAML logins for "chrome sign in"

[Cantor, Scott]

On 12/28/15, 2:51 PM, "users on behalf of Matt MacAdam" <users-bounces at shibboleth.net on behalf of mattjm at uw.edu> wrote:



>-Receive Shib IdP "no cookies" error.

I don't know what error you're referring to, but FWIW I tried with a vanilla V3 install that the Shibboleth team have running and a Google account that happens to be backed by it and it appears to have worked (I couldn't say exactly what it was meant to do, but it's back at Google's site and seems to say I'm logged in.

>Inspecting cookies indicates Chrome is losing the authn request when
>it switches from the sign-in box to the new tab for IdP login.

The SAML request isn't carried by any cookies. There is certainly cookie-based state, but if V3 works, I don't know why V2 wouldn't.

-- Scott