Application Override: no valid session

[Cantor, Scott]

>    Third: our IDP requires acs by index and attributeIndex; I know you don’t
> like that, neither do I.... 

What a nightmare.

>    As you may have noticed, I'm not a Shibboleth Expert, but like they say:
> “In the land of the blind, the one-eyed man is king”.

When you have somebody telling you you have to do all of the things that are either bad practice or known to be really hard to make work, expertise doesn't much enter into it.

That's pretty much the perfect storm of what the SP only supports in theory. I haven't even paid attention to index support in years, and it's incredibly hard to make that work. It was dumped over 10 years ago as an irrelevant feature.

Artifact is bad, but the index thing is just literally something that doesn't work well due to how the configuration evolved. Over time, it got more and more difficult to keep that working and I just stopped paying any mind to it.

-- Scott