SSO Session Cookies

[Cantor, Scott]

> No errors in logs. This is the snippet from idp-process.log
> upon the 2nd attempt to another SP after user has logged in.

That shows there's no session available, which answers the "what", just not the why. Either the IdP's own session cookie or the client storage data are absent from the client and the request. The JSESSIONID cookie isn't really what matters.

> Don't know how to debug this further since this is also
> related to the browser.

Tracing requests, tracking cookie headers, examining local storage state, that kind of thing.

Toggling over to server-side sessions tenporarily is a way to rule out issues and just see if it's working in a vanilla mode before working out why client storage isn't working.

-- Scott