StorageService-backed RelayState mechanism did not return a state value.

Cantor, Scott cantor.2 at osu.edu
Mon Nov 19 17:32:56 EST 2018


On 11/19/18, 5:24 PM, "users on behalf of Dan McLaughlin" <users-bounces at shibboleth.net on behalf of dmclaughlin at tech-consortium.com> wrote:

> If that's correct, then what's the down side of using relayState
> cookie, and why would you ever want to use relayState ss:mem?

The default matches the clustering or lack thereof of the SP, which is to say, since the SP out of box is not functional across servers because of session state, it works fine to do it that way.

Cookies introduce hard to debug failure modes involving frames and third party cookies, http/https mismatches, and hostname rewrites that I got tired of answering questions about. They also used to break Office document links.

-- Scott




More information about the users mailing list