Shibboleth IDP with certain IE Settings

[Mailvaganam, Hari]

A similar with Firefox caused following (exceeded max header on the load balancer): https://supportforums.cisco.com/document/101916/ace30-firefox-resets-connection-specially-large-http-post-request

The following suggested resolved it - https://supportforums.cisco.com/discussion/11508956/ace-connection-reset-using-firefox 

________________________________________
From: users [users-bounces at shibboleth.net] on behalf of Brandon McKean [mckeanbs at jmu.edu]
Sent: Monday, October 05, 2015 06:31
To: users at shibboleth.net
Subject: Re: Shibboleth IDP with certain IE Settings

> What error?
We get either unspecified service provider or stale request. It doesn't
appear to be consistent.

> Unless you're using frames, I don't know what you could be seeing.

It should generally be what's default with IDPv2 and IDPv3. It seems to
do this on both. (Though I don't in any way suspect it's the IDP at fault.)

Thanks,

--
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235

On 10/05/2015 08:52 AM, Cantor, Scott wrote:
> On 10/5/15, 8:48 AM, "users on behalf of Brandon McKean" <users-bounces at shibboleth.net on behalf of mckeanbs at jmu.edu> wrote:
>
>
>
>> The base issue appears to be that IE, in certain circumstances, will not
>> properly pass information from the SP to the IDP. That is, we'll have
>> scenarios where a login is started, and when the user arrives at the
>> IDP, they get the same error as if they want to the IDP straight.
> What error?
>
>> In these same situations, other browsers do not exhibit these issues,
>> and a fix that seems to work for IE is to add the IDP URL to the
>> intranet zone in the browsers security settings.
> Unless you're using frames, I don't know what you could be seeing.
>
> -- Scott
>

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net