OpenAthens SP to Shibboleth (using OA Federation): Deep Links
Nate Klingenstein
ndk at sudonym.me
Tue Jan 26 11:55:28 EST 2016
Between cookies and ss:mem, then? I don’t know. I guess I’m completely wrong.
But I’d still investigate the handling of RelayState by the IdP.
> On Jan 26, 2016, at 09:49, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>>> For relayState, we're using "ss:db" (we recently switched from "ss:mem").
>> Could this have anything to do with it?
>>
>> Yes, this is almost certainly it. I think the database identifiers contain
>> different characters than the in-memory identifiers, so some software will
>> [inappropriately] notice the difference.
>
> I haven't read this thread, but using ss:name just means "generate a short token and store the underlying URL against that token as a key in the named storage service". Whether it's memory or database is irrelevant to what appears in RelayState on the wire.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list