Strange Firefox/Shibboleth interaction with Cache-Control and shib session

[Cantor, Scott]

On 7/11/16, 5:48 PM, "users on behalf of Micky Williamson" <users-bounces at shibboleth.net on behalf of mwilliamson at silasg.com> wrote:

> the side affect is that Shibboleth doesn’t have a valid session, checked with
> www.app.com/Shibboleth.sso/Session but, when the app is access, the user is not prompted
> to log in.  I would think that without a valid session, shibboleth would force a redirect
> to the iDP….do I have that wrong?

It doesn't have to force that, but requiring a session in the SP will cause the redirect if there were really no session. So what you describe is not possible in the general case unless you're not requiring a session.

Your original note shows your overrides are broken and you're not accessing the Session handler at a URL that will show you anything accurate. So more than likely you're just getting wrong information about of the SP about the session existing. It exists.

-- Scott