Strange behavior in shibboleth when receiving login request

[Tomas Liljebergh]

Hello!

We have encountered a strange problem.
Maybe someone has a clue about what is happening.

One system we have are sending requests to our idp so users can logg in.

https://www.student.ladok.se/Shibboleth.sso/Login?entityID=https%3A%2F%2Fshib-idp-1.oru.se%2Fidp%2Fshibboleth&target=https%3A%2F%2Fwww.student.ladok.se%2Fstudent%2Fauth%2Fswamid%2Flogin#%2Freg&forceAuthn=true

when shibboleth processes this it truncates the request and dont forward the options to our idp:

GET https://www.student.ladok.se/Shibboleth.sso/Login?entityID=https%3A%2F%2Fshib-idp-1.oru.se%2Fidp%2Fshibboleth&target=https%3A%2F%2Fwww.student.ladok.se%2Fstudent%2Fauth%2Fswamid#%2Freg&prompt=login&locale=sv&language=sv
POST https://shib-idp-1.oru.se/idp/profile/SAML2/Redirect/SSO?execution=e1s1
GET https://shib-idp-1.oru.se/idp/profile/SAML2/Redirect/SSO?execution=e1s2
GET https://shib-idp-1.oru.se/idp/profile/Authn/OIDC/RP/authz?conversation=e1s2

Here i can see that it goes from e1s1 to e1s2, looks like a problem for me, or?

If i take the link and post it in a web browser i get the same result the first time i do it in a new fresh browser, but if i do it twice it works.
First time a saml-trace looks just the same as above but the second time in the same window i get this and it works:

POST https://shib-idp-1.oru.se/idp/profile/SAML2/Redirect/SSO?execution=e2s1#%2Freg&forceAuthn=true
GET https://shib-idp-1.oru.se/idp/profile/SAML2/Redirect/SSO?execution=e2s1#%2Freg&forceAuthn=true
GET https://shib-idp-1.oru.se/idp/profile/Authn/OIDC/RP/authz?conversation=e2s1#%2Freg&forceAuthn=true

The second time i post the url it stays on e2s1.

The thing is that we are checking the url for part of the text to determine what login page we will display. Eg we check for "%2Freg"

Anyone got a clue what to do?

We are using latest version of shibboleth and the oidc module
oidc as the actual verification of the user is done on another server running oidc.


Regards Tomas


Tomas Liljebergh

Tomas.liljebergh at oru.se



Department for digitalisation and IT

Fakultetsgatan 1

University of Örebro


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20241220/ede4f4b3/attachment.htm>