Shibboleth 2.5.3 SP looping after successful POST

Peter Schober peter.schober at univie.ac.at
Fri Oct 21 15:48:54 EDT 2016


* Klingenstein, Nate <nklingenstein at calstate.edu> [2016-10-21 21:46]:
> My first guess is that you're accidentally protecting the
> /Shibboleth.sso tree with actual Shibboleth access control rules, so
> as soon as you get back to the SP, assertion in hand, it's
> recognized as attempted access to a protected resource, and 302,
> and...

The SP does not protect its own endpoints, ever, AFAIR.
Also the above doesn't match the OP's description where after
reciecing the POST a redirect to the root of the site is generated
(and not an authn request, that only comes after that).
-peter


More information about the users mailing list