Error message: Client address x.x.x.x invalid for session ... bound to y.y.y.y

[Cantor, Scott]

Adding footnote:
[1] https://wiki.shibboleth.net/confluence/display/IDP4/AuthenticationConfiguration

On 3/16/21, 12:25 PM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

    No, it's not causing the error you're talking about, but the ability to disable address binding is provided by the idp.session.consistentAddress property as documented [1].

    IMHO running an IdP with unbound sessions is a really, really bad idea but that's not my decision. I really wish we had a metadata signal for such IdPs though, because I sure as heck wouldn't accept their assertions.

    -- Scott


    -- 
    For Consortium Member technical support, see https://urldefense.com/v3/__https://wiki.shibboleth.net/confluence/x/coFAAg__;!!KGKeukY!ncs74bUwdWpxul5cjP97h-9BEz7PbHLLQucFgv6ZA1lKLq7dqa6P1zZDo9iSPJc$ 
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net