Authentication looping

[Schwendner, Joanne]

NO!!  I didn't see it!   Looking....

Thanks.
Joanne


On Thu, Nov 6, 2025 at 10:33 AM Steven Premeau <steven.premeau at maine.edu>
wrote:

> Joanne -
>
>   Have you seen this delivered option, which leverages the Intercept
> functionality of the IDP?
>
>
> https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199501570/LoopDetection
>
> Steve.
>
> On Thu, Nov 6, 2025 at 9:44 AM Schwendner, Joanne via users <
> users at shibboleth.net> wrote:
>
>> Good morning.
>>
>> Occasionally we see misconfigured websites that cause a looping situation
>> of repeated authentications between SP and IDP.  Though these can come from
>> campus websites, we (at the IdP) normally don't have access to, or control
>> over, the web server configurations.  We would like to run a script or
>> program in the IdP to detect when these loops are happening, and somehow
>> break out of the session to stop the loop.
>>
>> Has anyone been successful in accomplishing something like that?  The
>> detection is easy, but the breaking out of the loop from the IdP side is
>> what I'm not knowing.
>>
>> Regards,
>> Joanne
>>
>> ---
>>
>> Joanne Schwendner
>> Identity Services
>> Office of Information Technology
>> Brown University
>>
>> --
>> For Consortium Member technical support, see
>> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20251106/2798b75b/attachment.htm>