delegation in IDP3

[Cantor, Scott]

On 8/10/16 8:03 PM, Robert A Basch wrote:
> 
> I did see a new error in the log, appearing twice in succession just
> before the audit line for the assertion:
> 
>     ERROR [org.opensaml.storage.impl.client.ClientStorageService:451] -
>       StorageService shibboleth.ClientSessionStorageService: No storage
>       object found in session
> But the assertion seemed to be correct, and authentication was apparently
> successful when the assertion was posted to the back-end service.  I'm
> guessing this error has to do with the client not supporting the session
> cookie, and that this storage is not useful in this case anyway.

Right, I think it's a glitch in the way the flows got reused and not
realizing that step has to be skipped, and Brent might have tested only
with the server-side storage case.

Brent would be in a much better position to test that out than I am
until we can get an integration test in place for this profile, but
please file a bug with a log trace so we can follow up later.

I think we have all the other bugs you found patched or at least ready
to patch, thanks for pressing.

-- Scott