Chrome users getting CSRF token verification failed errors

[Steven Teixeira]

We have seen it.  It seems the Dashlane extension is interfering, but there's only been three confirmed cases here so far and the following steps helped two of those users past this issue(waiting to hear back from the third):

Right click on Dashlane and under settings/extension options, switch from "New Autofill Experience Engine" to "Legacy Autofill Experience Engine".

Credit goes to this Reddit post, and the colleague at a sister university for finding it: https://www.reddit.com/r/rit/comments/twx2bs/csrf_token_verification_failed_unable_to_login_to/

Steven Teixeira

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Christopher Bongaarts via users
Sent: Wednesday, April 6, 2022 2:18 PM
To: Shib Users <users at shibboleth.net>
Cc: Christopher Bongaarts <cab at umn.edu>
Subject: Chrome users getting CSRF token verification failed errors

We've recently (last day or so) seen an uptick in Chrome users getting CSRF token verification failed errors.  Wondering if anyone else is seeing this.

In some cases it looks like it might be a Chrome extension that is interfering (possibly an Adobe extension but there's not enough data to say for sure).

In the current incarnation, using incognito mode or a different Chrome
profile(?) works fine (which tends to support the extension interference hypothesis).

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fumn.edu%2F~cab&data=04%7C01%7Csteixeira%40csustan.edu%7Cd14f14c5d325458390ad08da18130169%7Cbee5690713df4af2a4bfd7ef0debc01c%7C0%7C0%7C637848767158838986%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=3RkpjqRrlZvi88OM%2FLmJRSY%2FfBDlhBOTkBEtnOKs8cQ%3D&reserved=0  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

--
For Consortium Member technical support, see https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=04%7C01%7Csteixeira%40csustan.edu%7Cd14f14c5d325458390ad08da18130169%7Cbee5690713df4af2a4bfd7ef0debc01c%7C0%7C0%7C637848767158838986%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&sdata=NJJeobtqxNJ0StWSQ6cGHChYMyjC8QgVarUGAbBz0Fo%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net