Authentication looping

[Schwendner, Joanne]

Good morning.

Occasionally we see misconfigured websites that cause a looping situation
of repeated authentications between SP and IDP.  Though these can come from
campus websites, we (at the IdP) normally don't have access to, or control
over, the web server configurations.  We would like to run a script or
program in the IdP to detect when these loops are happening, and somehow
break out of the session to stop the loop.

Has anyone been successful in accomplishing something like that?  The
detection is easy, but the breaking out of the loop from the IdP side is
what I'm not knowing.

Regards,
Joanne

---

Joanne Schwendner
Identity Services
Office of Information Technology
Brown University
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20251106/c1699353/attachment.htm>