IDP3.2.1 Unable to decode incoming request

[Cantor, Scott]

On 7/12/16, 7:32 AM, "users on behalf of Käfer Thomas" <users-bounces at shibboleth.net on behalf of thomas.kaefer at fh-campuswien.ac.at> wrote:

> The browser does not seem to be doing anything differently as to when it works, it sends
> the same POST request but does not get the set-cookie header it normally should and
> therefore after sending username password in a second POST the server forwards him to
> the stale request page.

That's your container malfunctioning. The IdP doesn't have any involvement in the session in question, it's the standard Java container session. If that's not working properly, your container is at fault.

It would manifest that way. Without a session, the webflow request gets dumped into a new flow execution, and that's ends up trying to decode a fresh SAML request and failing.

-- Scott