Shibboleth 2.5.3 SP looping after successful POST

[Cantor, Scott]

> I have an Apache site hosted in AWS on EC2, with an ELB with SSL termination
> in front, and the Shibboleth SP 2.5.3 protecting from the root down. The site
> loops indefinitely, and I can't understand why.

Looping is a function of your deployment, and the web server being misconfigured, and they're only traceable with access to the service.

> I have handlerSSL set to false, cookieProps set to https, and Apache has the
> proper canonical name for the domain. I see in the Shibboleth log file that
> the POST is creating the session, so why am I stuck in a loop here?

Setting handlerSSL to false implies not using TLS, so setting cookieProps to https and then using http to access a site is a guaranteed loop. Session created, cookie set for https, resource access with http, no cookie, no session, loop.

-- Scott