Stale Request after IP change

[Cantor, Scott]

On 11/9/21, 8:19 AM, "users on behalf of Janusz Ulanowski" <users-bounces at shibboleth.net on behalf of janusz.ulanowski at heanet.ie> wrote:

>    Is it a bug or there some configuration change required?

Neither, it's exactly what it says. There's nothing the IdP can do if you're handing it a conversation key that doesn't exist on that server for that client.

Either you have a cluster that's switching servers mid-flow or you didn't deal with SameSite and it's not supplying JSESSIONID on the way back.

-- Scott