OpenAthens SP to Shibboleth (using OA Federation): Deep Links

Nate Klingenstein ndk at sudonym.me
Tue Jan 26 11:55:28 EST 2016


Between cookies and ss:mem, then?  I don’t know.  I guess I’m completely wrong.

But I’d still investigate the handling of RelayState by the IdP.

> On Jan 26, 2016, at 09:49, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>>> For relayState, we're using "ss:db" (we recently switched from "ss:mem").
>> Could this have anything to do with it?
>> 
>> Yes, this is almost certainly it.  I think the database identifiers contain
>> different characters than the in-memory identifiers, so some software will
>> [inappropriately] notice the difference.
> 
> I haven't read this thread, but using ss:name just means "generate a short token and store the underlying URL against that token as a key in the named storage service". Whether it's memory or database is irrelevant to what appears in RelayState on the wire.
> 
> -- Scott
> 
> -- 
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list