__host-jsessionid changes inappropriately

[Nabeelah Azam, Fnu]

Scott, 

Then, what do you think may be the cause in our case where the cookie value is changing on us?

Apart from gathering the browser trace, and the idp logs is there a different thing we should be looking at as well?

Thanks, 

Nabeelah Azam
Systems Administrator | IT at Sam
Sam Houston State University
936.294.2326 | nabeelah.azam at shsu.edu

IT Strategic Alignment |View the IT at Sam Roadmap

-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu> 
Sent: Friday, August 16, 2024 8:39 AM
To: Shib Users <users at shibboleth.net>; Nabeelah Azam, Fnu <nabeelah.azam at shsu.edu>
Cc: Ainsworth, Christopher <christopher.ainsworth at shsu.edu>; Taylor, Michael <michael.taylor at shsu.edu>
Subject: Re: __host-jsessionid changes inappropriately

CAUTION:The sender of this email is not from SHSU.
Any links or attachments may be dangerous. To report this email as suspicious, forward it to abuse at shsu.edu.

I have to say though, I don't think this is your issue.

SameSIte doesn't outright break the IdP generally, it just causes SSO to be less effective in various cases and it breaks logout I think.

I am not aware of any scenarios where it triggers a stale request error except for SAML proxying.

-- Scott