"Rejecting replayed message ID" for iOS Native Application when using webview element

mattzard mgrovesx at googlemail.com
Wed Jun 12 11:40:57 EDT 2019


I have an issue with an iOS Native Application using a webview element. My 
SAML URL has been placed into the webview element, but it is raising the 
following errors: 

        2019-06-12 10:10:43 INFO Shibboleth.SessionCache [5] [default]: new
session 
created: ID (x) IdP (x) Protocol(urn:oasis:names:tc:SAML:2.0:protocol) 
Address (x) 
        2019-06-12 10:10:43 ERROR OpenSAML.SecurityPolicyRule.MessageFlow
[6] 
[default]: replay detected of message ID (x) 
        2019-06-12 10:10:43 WARN Shibboleth.SSO.SAML2 [6] [default]: error 
processing incoming assertion: Rejecting replayed message ID (x). 

If I use the same SAML URL within an external browser on the same device, 
the errors are not raised and my authentication process completes without 
issue. 

I found on the Shibboleth Wiki regarding this error: "/You should ask your
SP to issue a fresh one/", if this could be my solution, how do I issue a
"fresh one" if this error is experienced?

Is there a known issue in regards to the webview elements for iOS Native 
Applications? Is there anything that I can do to get this working? The issue 
appears to be 100% replicable.



--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html


More information about the users mailing list