IDP3.2.1 Unable to decode incoming request
Peter Schober
peter.schober at univie.ac.at
Tue Jul 12 08:03:39 EDT 2016
* Käfer Thomas <thomas.kaefer at fh-campuswien.ac.at> [2016-07-12 13:48]:
> Well, from as far as I unsterstand what the debug browser tools show me, yes the browsers send POST requests.
>
> It exhibits the same behavior for any configured SP, including your own sp.eduid.at.
>
> You can easily test this yourself without having a valid
> username/password combination. If it works as it should, you should
> stay at the login form and simply get an error that the combination
> is wrong. If you see the error you get to the stale request page
> instead.
Well, by default the Shib SP (as well as /this/ Shib SP) will initate
SSO using the HTTP-Redirect binding, so there would never be a HTTP
POST request to the IDP.
Therefore just accessing https://sp.eduid.at/ and picking your (or any
other) IDP does not help me reproduce this error, as no POST to the
IDP will be generated, hence no error (but the expecetd login form).
So I would have expected this problem only to manifest itself when
used with SPs that use HTTP POST for transmission of authentication
requests?
-peter
More information about the users
mailing list