Shibboleth SP & Okta IdP Redirect Looping

Cantor, Scott cantor.2 at
Thu Aug 6 00:09:51 UTC 2020

And I'm sorry for all the misdirects and blind alleys, but this isn't generally why loops happen. IdPs pretty much do what they're told, they get a request and the response goes back to the ACS URL in the request or they refuse. Hardwiring them to respond to some arbitrary URL that's wrong is just not how things work.

It's much more common for the SP and Apache to be stepping on each other in weird ways than for an IdP to be this oddly behaved. It never occurred to me to ask, and you wouldn't know the obvious signs.

-- Scott

More information about the users mailing list