Authentication looping

[Steven Premeau]

Joanne -

  Have you seen this delivered option, which leverages the Intercept
functionality of the IDP?


https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199501570/LoopDetection

Steve.

On Thu, Nov 6, 2025 at 9:44 AM Schwendner, Joanne via users <
users at shibboleth.net> wrote:

> Good morning.
>
> Occasionally we see misconfigured websites that cause a looping situation
> of repeated authentications between SP and IDP.  Though these can come from
> campus websites, we (at the IdP) normally don't have access to, or control
> over, the web server configurations.  We would like to run a script or
> program in the IdP to detect when these loops are happening, and somehow
> break out of the session to stop the loop.
>
> Has anyone been successful in accomplishing something like that?  The
> detection is easy, but the breaking out of the loop from the IdP side is
> what I'm not knowing.
>
> Regards,
> Joanne
>
> ---
>
> Joanne Schwendner
> Identity Services
> Office of Information Technology
> Brown University
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20251106/f83255bb/attachment.htm>