back-button sends browser to idp again

[Yasser Afifi]

Hello All,

Thanks again for your great help.

I have 2 questions please

1- I deployed shib IDP and SP and they are working fine now (FINALLY!) But
i noticed that after SP redirect user to IDP for authentication. If
everything goes well then user is logged in and can see the protected page.
But if the user press back button on his browser, he will get to see the
idp again (to this link https://localhost/idp/profile/SAML2/Redirect/SSO)
with a message saying:
Web Login Service - Stale Request

You may be seeing this page because you used the Back button while browsing
a secure web site or application. Alternatively, you may have mistakenly
bookmarked the web login form instead of the actual web site you wanted to
bookmark or used a link created by somebody else who made the same mistake.


How can i customize this page?



2- My second question is how can i customize the login page with a jsp
page? how can i get input from the login form to the idp web app?


Thanks all of you for your great help!

Yasser
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160129/db17c2d3/attachment.html>