RelyParty redirect URL

[Cantor, Scott]

On 7/2/20, 11:20 AM, "users on behalf of Joseph Fischetti" <users-bounces at shibboleth.net on behalf of Joseph.Fischetti at marist.edu> wrote:

> Is there any way to force the JSESSIONID to exist in the flowExecutionUrl (i.e. it doesn't always), or is it available as a 
> variable I can access in a velocity template?

That's terrible security practice, but it won't matter anyway.

It's already in a cookie, and if the cookie isn't sent back, nothing's going to work right anyway. And if the session is actually just expired, including it in the URL won't help.

Whatever you're doing either isn't technically possible or it's relying on the session lasting long enough, which there's no guarantee of (but the timeout value is not up to the IdP, it's set by the container, and is changeable).

-- Scott