When reauth is needed it does not carry POST/GET variables

Dan shibboleth at mailscan.dk
Fri Feb 21 15:46:14 UTC 2025


I have a problem which I seem to be unable to solve. I have spent several hours trying and failing, and reading documentation. I expect I have missed something.

First I will describe my setup:

* Windows server with IIS
* Installed Shibboleth SP3 version 3.5.0
* Identity Provider is corporate Azure
* Using PHP as server-side and 
* Shibboleth session info:
  - SSO Protocol: urn:oasis:names:tc:SAML:2.0:protocol
  - Identity Provider: https://sts.windows.net/1xxxx-sxx-3xxxx-s1xxx-60xxxxxxx/

When I have a <form>, and my Azure session has expired, then it will of course reauthenticate. This happens when I have been idel for 60-90 minutes. The reauth is working fine, but it will not transfer any <form> $_POST or $_GET values to my destination page?

Does anyone have any ideas what this could be?

Is this actually a Azure configuration thing (our IT has looked in to it, but they cannot see it is a problem with Azure), or is the problem a configuration in my Shibboleth?

Some help would be really appreciated, as the current situation is not good, as people might loose work they have not saved for 60-90 minutes.

Thanks a lot,

// Dan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250221/fd95496e/attachment.htm>


More information about the users mailing list