custom authentication

[Cantor, Scott]

On 12/9/16, 11:50 AM, "users on behalf of Virajitha Sarma" <users-bounces at shibboleth.net on behalf of virajitha.sarma at globallogic.com> wrote:

>    Scott, you got really angry.

That isn't me angry, that's me stating a fact.
 
>    Browser sessions: are closed when browser is closed

Sometimes, yes. And if the session is closed, the IdP session is closed, because it's a session cookie. Which is what you just described happening. So the thing that most people expect to happen is in fact happening and you're asking why it's happening? I'm sorry, but that makes no sense to me.

If you want to see it *not* happen, use Firefox or Chrome and turn on session restore.

> Anyways, no problem configuration of IDP should not be my issue. I will just tell my customer that I gave SAML SSO support
> in my web app and now you go read the documentation and figure out the IDP configurations on your own. 
    
Well, yes. That seems like common sense to me.

-- Scott