Concurrency Error

[Cantor, Scott]

On 7/17/15, 1:25 PM, "users on behalf of Argenis Lopez" <users-bounces at shibboleth.net on behalf of alopez at fcci-group.com> wrote:
>
>* User “user1” is authenticated to his desktop to his domain
>* In a normal scenario, “User1” opens the application and he gets into it without any problem. Kerberos + Shibboleth do the job, well done
>* Few (very few) scenarios, user1 opens the application and gets into the application as “user2”. User1, and User2 never share the same desktop and their principals are totally different

If the issue isn't with reuse of the IdP session (an identity switch), then I would have to conclude the bug might be in that login handler, which is not our code. Nothing similar has been reported with any of our login handlers, apart from deliberate reuse of a session by a different user, which behaves in a known fashion.

I assume you have detailed debugging logs that outline the behavior you're talking about. Otherwise I wouldn't even assume it's the IdP involved. A broken application could cause the same result.

-- Scott