Ex: Re: error seen by user when 'Rejecting replayed message ID'?

Paul Henson henson at signet.id
Fri Jan 3 15:59:00 EST 2020


On Fri, Jan 03, 2020 at 01:00:06PM +0000, Cantor, Scott wrote:

> > What would one expect to see in a browser as far as an error message
> > when the idp thinks it has detected a replayed message and aborts the
> > authentication?
> 
> The same page.

Ok, thanks much for the confirmation. The client is seeing the same
error page, but now the idp is logging a message replay error rather
than a NoSuchFlow error, so it's not quite the same failure. This issue
is a real headache, between all the players involved and the lack of
direct access to the pieces I feel like the blind men and the elephant
8-/.


More information about the users mailing list