SSO Redirect Loop

[Tim Owens]

Totally understood. I had been using the SAML Chrome Panel in the developer
toolbar to watch the request, though I'll be the first to admit I don't
have enough of an understanding to parse the returned requests and see if
there's anything amiss there. I'll take a look at Fiddler and SAML Tracer
as well to see if they offer more insight. The logs thus far haven't shown
anything of note since the requests are processing successfully so I do
believe as Scott said it's an issue with the cookie but haven't figured out
why the app can't accept it when the session is valid. I'll keep digging
and appreciate the responses from you all!

Tim Owens
Co-Founder • tim at reclaimhosting.com


On Tue, Aug 23, 2016 at 12:28 PM, Matthew X. Economou <xenophon at irtnog.org>
wrote:

> Scott Cantor writes:
>
> > There are an essentially infinite set of causes, all unique to every
> > different situation. There's no way anybody can diagnose it from the
> > outside, other than by actually hitting those URLs and tracing, and
> > seeing the logs, the latter being impossible for anybody outside to
> do.
>
> Just to re-iterate what Scott said here, you really need to run this
> under a debugger in order to see what's going on in detail.  Otherwise,
> we all just end up wasting our time guessing.  This morning I
> successfully diagnosed an authentication problem similar to yours that
> was caused by a missing claim, but I only caught it by effectively
> MitM-ing myself and watching everything my browser did as it looped
> through the federated logon process.  I usually use the SAML Tracer
> plugin for Firefox
> (https://addons.mozilla.org/en-US/firefox/addon/saml-tracer/), but I'm
> starting to use Fiddler more often (http://www.telerik.com/fiddler).
> I'm sure everyone here could recommend their favorite debugger if you
> asked.
>
> Best wishes,
> Matthew
>
> --
> "The lyf so short, the craft so longe to lerne."
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160823/c0279e65/attachment.html>