Shibboleth SP and ADFS

[Cantor, Scott]

> Has anyone run into the blank session ID issue? Anything else we or they
> should be doing to debug the problem?

I can't really think offhand how it's possible for that to happen, but it would take some code review, and I won't spend that time unless you reproduce the issue on the supported version (and then you can feel free to file a bug on it).

A full log trace might give me a hint about it. Presumably it's got something to do with the message, so that's the place to look.

I would have to run a sample message (without encryption on ideally) through the code to debug it, I just need the metadata being used to provision a test. With encryption on it would not work unless I had the key, so that's not ideal. I don't think it would have any impact on the issue whether it's on or off, but if you can't get a non-encrypted test from the IdP, that doesn't leave good options apart from generating a dummy keypair for a test that you could attach to a bug report.

-- Scott