Strange Firefox/Shibboleth interaction with Cache-Control and shib session

[Micky Williamson]

I have multiple configurations….  This one has no overrides, just a standard One Application setup.

the multi customer wish on the other thread is a totally different issue.


> On Jul 11, 2016, at 3:54 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> On 7/11/16, 5:48 PM, "users on behalf of Micky Williamson" <users-bounces at shibboleth.net on behalf of mwilliamson at silasg.com> wrote:
>
>> the side affect is that Shibboleth doesn’t have a valid session, checked with
>> www.app.com/Shibboleth.sso/Session but, when the app is access, the user is not prompted
>> to log in.  I would think that without a valid session, shibboleth would force a redirect
>> to the iDP….do I have that wrong?
>
> It doesn't have to force that, but requiring a session in the SP will cause the redirect if there were really no session. So what you describe is not possible in the general case unless you're not requiring a session.
>
> Your original note shows your overrides are broken and you're not accessing the Session handler at a URL that will show you anything accurate. So more than likely you're just getting wrong information about of the SP about the session existing. It exists.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

This communication may contain proprietary or other confidential information intended for a specific individual and purpose, and is protected by law. If you are not the intended recipient, you should delete this message. Any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited.