Shibboleth 2.5.3 SP looping after successful POST

[Klingenstein, Nate]

James,

I have handlerSSL set to false, cookieProps set to https, and Apache has the proper canonical name for the domain. I see in the Shibboleth log file that the POST is creating the session, so why am I stuck in a loop here?

My first guess is that you're accidentally protecting the /Shibboleth.sso tree with actual Shibboleth access control rules, so as soon as you get back to the SP, assertion in hand, it's recognized as attempted access to a protected resource, and 302, and...

Hope this helps,
Nate.

completely off-topic p.s. I love your milk, but if only it had pure dextrose instead of sucrose or d-galactose...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161021/4a92818d/attachment.html>