PIV login issues

[Matthews, Lee (NIH/NIDDK) [E]]

I do see this entry in the sessions stanza of my shibboleth2.xml
redirectlimit="exact"

________________________________
From: Matthews, Lee (NIH/NIDDK) [E] via users <users at shibboleth.net>
Sent: Thursday, June 3, 2021 11:05 AM
To: users at shibboleth.net <users at shibboleth.net>
Cc: Matthews, Lee (NIH/NIDDK) [E] <lee.matthews at nih.gov>
Subject: PIV login issues

Hello to all.
We are experiencing some intermittent issues when logging in using PIV card.
It seems to mostly happen the first time a user is logging in.
The site gets stuck at https://sitename.fqdn.xxx/Shibboleth.sso/SAML2/POST.
I see these entries in the shibd.log:

 redirectLimit policy enforced, blocked redirect to (http://servername.fqdn.xxx/)
2021-06-03 10:55:19 WARN Shibboleth.SSO.SAML2 [1] [default]: error processing incoming assertion: Blocked unacceptable redirect location.

This not not happen all the time. I am guessing I have to add something with the redirectlimit, but I am not quite sure of the correct syntax.

Thanks in advance for any assistance.
Lee


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210603/66ef6750/attachment.htm>