"Replay detected of message" causes

[Cantor, Scott]

On 4/19/17, 5:50 PM, "users on behalf of Klingenstein, Nate" <users-bounces at shibboleth.net on behalf of nklingenstein at calstate.edu> wrote:

> Known and acknowledged but not a primary concern in this specific deployment because of SPNEGO and users that are quite
> willing to sit on the back button until they get... somewhere.

They won't, though, they'll be sent back where they started and can't just back up. And all your statistics will become meaningless.

That's *if* they actually see any difference at all since the most common error happens before this anyway.

> This is just the splice point he needed.

When I said you could do it, I meant "under no circumstances should you do it". There are any number of random features in the IdP that will break or work unsafely and I have no intention of even figuring out what they would be. Don't do it.
 
-- Scott