Ex: Re: error seen by user when 'Rejecting replayed message ID'?
Paul Henson
henson at signet.id
Fri Jan 3 15:59:00 EST 2020
On Fri, Jan 03, 2020 at 01:00:06PM +0000, Cantor, Scott wrote:
> > What would one expect to see in a browser as far as an error message
> > when the idp thinks it has detected a replayed message and aborts the
> > authentication?
>
> The same page.
Ok, thanks much for the confirmation. The client is seeing the same
error page, but now the idp is logging a message replay error rather
than a NoSuchFlow error, so it's not quite the same failure. This issue
is a real headache, between all the players involved and the lack of
direct access to the pieces I feel like the blind men and the elephant
8-/.
More information about the users
mailing list