Banne 9 Admin Pages" "Service Invocation Failed. Couldn't access remote service"

[Jason Rotunno]

I'm wondering if anyone who uses Banner 9 with CAS has run into this issue.
We tried enabling HTML Local Storage with client-side sessions in
Shibboleth but once we did that, users received the following error when
accessing Admin Pages:

Service Invocation Failed
Couldn't access remote service


A number of schools have help articles about this, but they all simply say
to clear the browser's cache. Unfortunately, that doesn't resolve the issue
for us.

One of our Banner admins found an article from Ellucian (000049779) stating
that this is a SameSite cookie issue. It explains how to set SameSite=None
on the Banner Admin server, but we still have the issue.

Has anyone run into this and figured out a workaround?

Thanks,
Jason

-- 

Jason Rotunno
System & Security Administrator
Swarthmore College
500 College Ave
Swarthmore, PA 19081
610.328.8505

*VERIFY before you click!!*
  - Attackers make their emails look like they come from someone they don't.
  - Attackers make links look like they go to websites they don't.
  - Attackers disguise malware as receipts, invoices, faxes, etc.

Forward suspicious emails to phishing at swarthmore.edu.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230220/26179001/attachment.htm>