When reauth is needed it does not carry POST/GET variables
Dan
shibboleth at mailscan.dk
Fri Feb 21 15:46:14 UTC 2025
I have a problem which I seem to be unable to solve. I have spent several hours trying and failing, and reading documentation. I expect I have missed something.
First I will describe my setup:
* Windows server with IIS
* Installed Shibboleth SP3 version 3.5.0
* Identity Provider is corporate Azure
* Using PHP as server-side and
* Shibboleth session info:
- SSO Protocol: urn:oasis:names:tc:SAML:2.0:protocol
- Identity Provider: https://sts.windows.net/1xxxx-sxx-3xxxx-s1xxx-60xxxxxxx/
When I have a <form>, and my Azure session has expired, then it will of course reauthenticate. This happens when I have been idel for 60-90 minutes. The reauth is working fine, but it will not transfer any <form> $_POST or $_GET values to my destination page?
Does anyone have any ideas what this could be?
Is this actually a Azure configuration thing (our IT has looked in to it, but they cannot see it is a problem with Azure), or is the problem a configuration in my Shibboleth?
Some help would be really appreciated, as the current situation is not good, as people might loose work they have not saved for 60-90 minutes.
Thanks a lot,
// Dan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250221/fd95496e/attachment.htm>
More information about the users
mailing list