IdP 3 and Stale Requests

[Cantor, Scott]

On 11/9/15, 10:31 AM, "users on behalf of James Gross" <users-bounces at shibboleth.net on behalf of JamesGross at uncc.edu> wrote:



>In the logs, we only see the errors "No SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message".

That is a back button or bookmark or what not.

>  We have confirmed by capture and decoding of the request that the SAMLRequest parameter was indeed present and valid.

That, essentially, isn’t possible, at least not with respect to those log entries. Of course, there isn’t really a direct correlation possible apart from IP.

On what basis did you conclude that they aren’t just hitting the back button?

-- Scott