institutions using Shibboleth to authenticate Peoplesoft

[Liam Hoekenga]

>
> We have a similar issue with an ordering system on campus, not SciQuest,
> but I can tell you that they are of course lying. A SameSite issue with an
> app has nothing to do with the SAML (or OIDC or....) IdP at all and can't
> possibly be fixed by it. The issue is with the app(s). They have to adjust
> their cookies (or people just can't use Chrome).
>

The vendor did adjust the SameSite cookies in their app, and if accessed
directly, it seems to work.
The issue occurs when the app is launched from "peoplesoft direct connect",
during which the checkout procedure only works during that magic 2 minute
interval.  Afterwards, it breaks.

Our PS people opened a support case with Oracle, and Oracle of course says
that it's the Shibboleth SP that is breaking the functionality.

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200728/8b5a4f6f/attachment.htm>