Error in Shibboleth login from mobile devices

Aseem Keskar Aseem.Keskar at wns.com
Mon Nov 18 13:34:25 EST 2019


Hi Nate and Scott,

Thank you for assistance and help here.

I apologize for the confusion here. We will get the HTTPS traffic logs for working and failing transactions from IdP server. We will share the same with you for your review within one or two days. We will also compare the both the logs from our end.

For our current setup, I can see that SAML request is being sent to Shibboleth so "mobile client losing affinity with the same IdP server" is not the case here.

Also, as we are trying this on fresh browser after deleting cookies, there won't be any existing JSESSIONID cookie. So as per our understanding, browser does not have to sent JSESSIONID during the request on fresh browser.

Kindly provide your valuable feedback here.

Thanks and regards,
Aseem Keskar
________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Sunday, November 17, 2019 9:31:08 AM
To: Shib Users
Subject: Re: Error in Shibboleth login from mobile devices

External Email: This email has not originated from WNS. Do not click on attachment or links/URL unless sender is reliable. Malware/ Viruses can be easily transmitted via email and also lead to a Phishing compromise.



Another possibility is the mobile client losing affinity with the same IdP server behind a load balancer, which could be a similar cookie bug on the part of the client, or a problem with a load balancer.

-- Scott


--
For Consortium Member technical support, see https://secure-web.cisco.com/10a4SS4xHfwWCQTJV8kwlBuojvXM_fhh3VWHNIkqLVBu-UPeIHm_XL12FCK9KYPp3NWNZ2zBkjCDJZZcUyzey6mFy0HpjF0p7UAatcGowz3m43zdz_6dyfqwP6CXtw0Gt_fgjMriat8P6VP2j8hyLPnl4lIiAFbXWCfIvesTkJlqY9FUH7sJj6KAw2N9x5L53uuR_OLrlDYAHicwySg8jPKBA1jIan2-AIpZDjn2L53xP7QRomLLeEFq02zXmeCf8JcO5Y_azvfwo4kf3CpQwxUSlN8TE29lqL5YX8Gd8U03VBbdiogOpGYYAQWT_8L8QfAcTJLvR5BSh4hMMYXnS4g/https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20191118/05530b78/attachment.html>


More information about the users mailing list