Request header cookie exceeds server limit with relayState="ss:mem"

[Jeremy Shapiro]

I'm getting a 400 response to a shibboleth protected server due to the
Cookie header exceeding the 8k limit.  My cookie header contains 8200
bytes, 56 instances of shibpost and 56 instances of shibstate. Examples
include:

_shibpost_1455658465_74a8=ss:mem:5366a7205e99c782f1361815f08e2bf885af6dd43732eca7c0fac2d087e693c3

_shibstate_1455674546_de35=https%3A%2F%2Fmyapp.example.com%2F

The sp is using relayState="ss:mem".  The documentation states that if I
were using relayState="cookie" my request should automatically be capped at
25 instances.

Is what I'm seeing expected behavior when using relayState="ss:mem"?

  Thanks,
  Jeremy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160216/db8b1ff9/attachment.html>