Request header cookie exceeds server limit with relayState="ss:mem"

[Cantor, Scott]

> I'm unable to reproduce the problem of the number of cookies increasing.
> With a new session,  I now get three cookies _shibpost, _shibstate, and
> _shibsession.  Are you saying that's unexpected as well?

Yes. That certainly isn't relayState by way of the storage service, that would be using the "cookie" option (that's what the "state" one is from). So seems like that disconnect is a place to start.

The _shibpost cookie should only be set if the initial request is via POST and the option to preserve POST data is set (you didn't say). And it should get cleaned up after sign-on when it ends up "replaying" the form POST.

-- Scott