Infinite authentication loop

[Jeffrey Crawford]

I find that usually happens when you set the cookies on the SP to https,
but forget to actually have the user go to the https url. The browser then
ignores the cookie when being set back to the http site, which then tells
the SP "They didn't log in" and back to the login page you go.

The best solution is to make sure there is an http to https rewrite rule on
the apache http server.

Jeffrey E. Crawford
Enterprise Service Team <jeffreyc at ucsc.edu>
    ^         ^
   / \  ^    / \    ^
  /   \/ \  /   \  / \
 /        \/     \/   \
/                      \

You have been assigned this mountain to prove to others that it *can* be
moved.

On Sat, Dec 16, 2017 at 9:29 PM, Christopher Bongaarts <cab at umn.edu> wrote:

> On 12/16/2017 8:29 PM, deeptiatsycode wrote:
>
> I am using the Shibboleth service provider v2 in my local windows 2010
> machine.
>
> Please help me with this issue I am facing:
>
> After authenticating in the test IDP, I am redirected back to the idp
> login page again.
>
> After authentication it has to take me back to the resource I had
> requested for initially. Instead it takes me to the IDP login page again.
>
> There are no errors logged.
>
> I have attached shibboleth config file for your reference.
>
> You can find troubleshooting steps specific to this condition here:
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping
>
> --
> %%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
> %%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171218/a63e3e22/attachment.html>