Shibboleth IDP with certain IE Settings

[Brandon McKean]

Hi Everyone,

We've recentlly discovered trouble regarding use of the IDP with 
Internet Explorer. I don't believe the IDP is actually what it is at 
fault, I just wish to understand what could cause this so that a fix can 
be implemented.

The base issue appears to be that IE, in certain circumstances, will not 
properly pass information from the SP to the IDP. That is, we'll have 
scenarios where a login is started, and when the user arrives at the 
IDP, they get the same error as if they want to the IDP straight.

In these same situations, other browsers do not exhibit these issues, 
and a fix that seems to work for IE is to add the IDP URL to the 
intranet zone in the browsers security settings.

Has anyone had similar issues to these? The whole idea of adding the IDP 
URL to the intranet zone was based on archived posts of this list from 
years ago, and in the cases they indicated, they got errors post login. 
These are happening before a login prompt is even reached.

Thanks,

-- 
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235