<span style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">Hello,</span><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
I have encountered a problem when testing Single Sign On between an application hosted on Apache HTTPD which is protected by a Shibboleth Service Provider and an application hosted on Tomcat which is protected by an OpenAM Policy Agent.</div>
<div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">Single Sign On works fine if I browse to the Shibboleth application first followed by browsing to the Policy Agent application and then logging into either application. Single logout functionality is working correctly in all cases.</div>
<div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif"><br></div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
The problem occurs when following these specific actions:</div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif"><br></div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
1: Browse to the application protected by the Policy Agent (but don't log in).</div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif"><br></div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
2: Browse to the application protected by Shibboleth (but don't log in).</div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif"><br></div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
3: Log into the application protected by the Policy Agent.</div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif"><br></div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
After completing step 3 above, when you click "Login", the URL changes to <a href="http://openam-url:8080/openam/UI/Login" style="color:rgb(17,85,204)" target="_blank">http://openam-url:8080/openam/UI/Login</a>. Then when you click "Login" again, the users OpenAM profile is displayed instead of the desired application.</div>
<div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif"><br></div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
Any insight anyone could give to the cause of this problem would be greatly appreciated.</div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif"><br></div><div style="color:rgb(34,34,34);font-size:13px;font-family:arial,sans-serif">
David</div>