Shibboleth behind a CDN

[chad phillips]

Hi,

We are having some issues using Shibboleth behind the Fastly CDN (based on
Varnish).  (Fastly CDN -> Apache with Shibboleth Service Provider)
We are specifically having issues on web pages that have multiple
XHR-requests. The requests each generate new
_opensaml_req* cookies.  We only get the _opensaml_req* cookies when we
turn the CDN on.   Some of the requests are getting sent off to our login
page.

We have Fastly setup to pass through all requests to access restricted
URLs.  Single web pages work fine.  Issues only seem to happen on pages
that have multiple XHR-requests.

Does anyone have an idea on what may be happening?

thank you
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230327/05421c74/attachment.htm>