Hyperlinks to Shibboleth protected URLs in MS Office documents

Philip Brusten philip.brusten at kuleuven.be
Wed Nov 29 03:13:40 EST 2017


On 29/11/2017 0:44, Cantor, Scott wrote:
> If you convinced the Office client to get the browser launched soon enough and then triggered the SP, that's about the only way I can see it working.
As I tried to point out in my first mail, the Office client is trying to 
be smarter for some reason and it executes 2 requests using the default 
browser.

1. To the proctected resource, which is ok
2. A GET request to the form action URL?!

Here is a summary of the fiddler trace:


As you can see there are two different processes of "microsoftedgecp".
1. is executed using microsoftedgecp:2120
2. is executed using microsoftedgecp:2724

The user ends up with one tab thats working, the other one with an error 
message.

For some reason the behaviour is different when the Edge browser is not 
running before you click the hyperlink. In that case that rogue 
GET-request is not launched.
When I use Chrome as my default browser, the behaviour is the same 
regardless of whether chrome is running or not. The users ends up with 2 
tabs.

Don't you observe the same behaviour?

Regards,
Philip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171129/cecd42c6/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: agibggmmpdgdbogp.png
Type: image/png
Size: 26136 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20171129/cecd42c6/attachment-0001.png>


More information about the users mailing list