CAS And Shibboleth SSO

[Marvin Addison]

On Wed, Aug 2, 2017 at 7:39 AM Rod Widdowson <rdw at steadingsoftware.com>
wrote:

> Is there anything 'interesting' about your network set up (multiple
> network adaptors or something such that SAML requests come in
> one another adaptor and the CAS another)?
>

Network effects are the best explanation for the behavior I can imagine. We
could confirm or refute that idea by configuring the logger to log the
source IP address; if it's different on the SAML request, then we'd have a
smoking gun. See
https://wiki.shibboleth.net/confluence/display/IDP30/LoggingConfiguration for
more information. You probably want to log the source IP anyway; we've
found it extremely helpful for correlating log events for both
troubleshooting and abuse investigations.

M <users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170802/bdc7a6ac/attachment.html>