idp 3.x CAS issue

[Mathis, Bradley]

I'm doing some testing of the CAS protocol in idp 3.x.  I'm using Jetty and
doing rewrite rule
that rewrites the URI of "/cas-stage/"  with  "/idp/profile/cas/"

see the two urls below:

https://login-stage.pima.edu/idp/profile/cas/login?service=https://www.pima.edu


https://login-stage.pima.edu/cas-stage/login?service=https://www.pima.edu



The first URL works as I expect it to in that when I access the url in my
brower I'm sent to the authentication page,
and If open a new tab in my browser and use the first URL again ... I go
straight to the desired service of https://www.pima.edu  and I don't have
to authenticate again, which is what I'm expecting it to do.


With the second URL (that get's rewritten) when I access it the first time
I get sent to the authentication page and then to the service as expected,
but when I attempt to access the same URL a second time in my browser... I
get sent to the authentication page again... and every time.
NOTE: This also happens if I do the rewrite on the Load balancer rather
than doing it in Jetty... in either case I always get sent to the
authentication page.  What's going on?  What am I missing? or
misunderstanding.

Thanks!

Brad Mathis
Principal Systems Analyst
Pima Community College
IT - Technical Services
520.206.4826
bmathis at pima.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181001/65273799/attachment.html>