understanding how IDP login works

Cantor, Scott cantor.2 at osu.edu
Sat Nov 6 04:27:10 UTC 2021


On 11/5/21, 5:04 PM, "users on behalf of Berry, James O." <users-bounces at shibboleth.net on behalf of berryj at wssu.edu> wrote:

>    How exactly does the login sessions work?

There is no single thing like that, it's much more complex.

https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631875/Sessions

> I notice that if I log into sp1, then open a new tab and go to sp2 I am automatically logged in. Then if I open
> another new tab and go to sp3 I have to log in again.

That is not a normal outcome and certainly is not reflective of a typical situation, but all it would take is an SP using ForceAuthn to explain that, a SameSite cookie issue, a client bug. Lots of reasons.

-- Scott




More information about the users mailing list