SSO Session Cookies

[Kapetanakis Giannis]

Hi,

Can please someone have a look on this? I'm strangling with this since yesterday.
I've also seen my views/webapp and rest of config files to match 5.1.3

I've even renamed idp.storage.clientSessionStorageName per 5.0.0 release notes.

My non-working (relevant) config so far is:

idp.cookie.secure = true
idp.cookie.domain = shibboleth-idp.example.com # was example.com

idp.cookie.path = /
idp.storage.htmlLocalStorage = true
idp.storage.clientSessionStorageName = idp_session_ss
idp.storage.clientPersistentStorageName = idp_persistent_ss
idp.session.enabled = true
#idp.session.persistent = false
idp.session.timeout = PT8H
idp.session.StorageService = shibboleth.ClientSessionStorageService
idp.session.cookieName = __Host-idp_session
idp.session.consistentAddress = true
idp.consent.StorageService = shibboleth.ClientPersistentStorageService

idp.authn.defaultLifetime = PT8H
idp.authn.defaultTimeout = PT60M

I still cannot find a way to make SSO work.

Thanks,

Giannis

On 03/02/2025 13:06, Kapetanakis Giannis via users wrote:

> Hi,
>
> I've upgraded from 4.3.3 to 5.1.3 and having problem with SSO on IDP.
> Client is always redirected to login page of IDP.
>
> setting the following didn't make any change
> idp.session.enabled = false # was true previously
>
> # also enabled this
> idp.storage.htmlLocalStorage=true
>
> My idp path is /idp
>
> idp.cookie.secure = true
> idp.cookie.domain = example.com
> idp.cookie.path = /idp # I've also tested / and commenting it out
>
> Can someone point to the recommended configuration?
>
> Thanks,
>
> G
>
> On 21/02/2024 16:50, Cantor, Scott via users wrote:
>> Off the top of my head, turning sessions off outright (common when proxying) would do it, as would using a new install that defaults to a __Host- prefixed cookie, which requires the path be set to /, which is also the OOB default now.
>>
>> -- Scott
>>
>>