Shibboleth IDP 4 on Ubuntu 18.04 with Jetty 10 => Stale Request and Access Denied!!!

[Nate Klingenstein]

Kay,

Something's probably off in your web server configuration such that cookies are not being set or sent back properly.  If the host names are different, as implied by your redaction, that would do it.  Either way, use the browser extension SAMLtracer and watch for JSESSIONID.

> http://xx.xxx.xxx.xx:8080/idp/profile/admin/hello
> http://xxx.xxx.xxx.xx:8080/idp/profile/admin/hello?execution=e1s1

You will certainly want to use https once you get this working.

> http://xx.xxx.xxx.xx:8080/idp/status
> I score an Access Denied.

This is to be expected if you haven't configured administrative access rights for the user-agent you're using to access the page.  The default configuration restricts access to localhost only.

Take care,
Nate

--------
Signet, Inc.
The Art of Access ®

https://www.signet.id