IIS 7 rewrite shibboleth authentication looping.

[Cantor, Scott]

> We have a windows server running IIS7 and Shibboleth SP 2.6.4.  The
> windows server is used as a proxy but we want authentication to occur
> before proxying request to another backend server.  We have set up the
> Shibboleth SP and get prompted correctly for our information but once we
> have authenticated it appears during the rewrite, the shibboleth session
> information is not being redirected during the rewrite.

I don't know what you think that means, but there is nothing redirected, every request is directly evaluated by the filter and information attached or not, and looping indicates cookie mismatches or issues that result in failure to revalidate and locate the session for the subsequent request(s) and then a re-init of the login loop. The wiki discusses common causes and only HTTP tracing can ultimately locate the issue.

-- Scott