On 9/28/15, 4:15 PM, "users on behalf of Liam Hoekenga" <users-bounces at shibboleth.net on behalf of liamr at umich.edu> wrote: >We're using server side storage for both. Another hmm. Seems like it was the cookie situation at fault but I don't know why. The IdP should only be using JSESSIONID and a session ID cookie. -- Scott