Needing some assistance setting up a session initiator on a linux sp v 2.5.5

[Paul Caskey]

They are in fact trying to follow the cookie.

It just makes for a mess in a highly-SSO environment if you have to pick your institution from a list numerous times a day, particularly in an environment where different hosts are representing a single environment (PeopleSoft).  Users scream and they've said that clearing cookies isn't that hard when inadvertent selections happen.  Not great, definitely agree with that, but following the cookie is a desired feature for that environment.

I looked at the config, didn't see anything wrong and, FWIW, it's been working until adding that SessionInitiator config.  I just wasn't sure what triggers that error, checked everything I knew to check.



> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Friday, September 11, 2015 8:25 PM
> To: Shib Users
> Subject: Re: Needing some assistance setting up a session initiator on a linux sp
> v 2.5.5
> 
> On 9/11/15, 9:36 AM, "users on behalf of Ewing, Bill" <users-
> bounces at shibboleth.net on behalf of BEwing at utsystem.edu> wrote:
> 
> 
> 
> >We were wanting to setup a sessioninitiator that would remember your
> previous idp selection cookie while using the EDS discovery or a static ds page.
> 
> The EDS already maintains the cookie for you... If you'te trying to silently follow
> the cookie, that's really not advisable. It makes backing out a selection
> impossible. And that's what the Cookie SessionInitiator does. It's not for
> creating the cookie, it's for consuming it and auto-following it.
> 
> >Web error
> >shibsp::ConfigurationException at (https://zap-
> idp.shared.utsystem.edu/Shibboleth.sso/Login)
> >Unable to locate a SAML 2.0 ACS endpoint to use for response.
> 
> You have to have changed and broken something else in the process. That
> addition alone couldn't do that.
> 
> -- Scott
> 
> --
> To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net