Having problems with SAML auth on IdP version 4.1.3

[Cantor, Scott]

On 7/27/21, 6:19 AM, "users on behalf of Duncan Sinclair" <users-bounces at shibboleth.net on behalf of d.sinclair at abertay.ac.uk> wrote:

>    Looking forward to the release, and getting rid of these back button errors.

That's not happening. The back button is always going to do exactly what it's doing, cause an error page. The specifics might vary, but the outcome is always an error.

The regression is with the response handling, as you saw, I was trying to fix a potential replay issue, but it isn't easily fixed so I backed off. That's just another variant of the back button issue.

I can't reproduce the behavior I patched using the back button on any browser I've tried. It was just a weird artifical edge case where an exception was happening when a particular part of the sequence happened twice, but I couldn't ever get it to happen without really deliberate re-entry of a URL.

-- Scott