<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><span>HI Scott,</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>The thing is i never start with http.</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>while testing im always using https://myservername/app1.</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>it then redirects to idp and after i login is when the looping happens.</span></div><div style="font-family:
'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="background-color: transparent;"><Sessions lifetime="7200" timeout="3600" checkAddress="false" consistentAddress="true"</div><div style="background-color: transparent;"> handlerURL="/Shibboleth.sso" handlerSSL="true"</div><div style="background-color: transparent;"> exportLocation="http://localhost/Shibboleth.sso/GetAssertion"</div><div style="background-color: transparent;"> cookieProps="; path=/; secure; HttpOnly" </div><div style="background-color: transparent;"><span></span></div><div style="background-color: transparent;"> idpHistory="true" idpHistoryDays="7"></div><div style="background-color:
transparent;"><br></div><div style="background-color: transparent;"><SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Intranet"</div><div style="background-color: transparent;"> relayState="cookie" entityID="https://abccompany.org/SAML2/IDP"</div><div style="background-color: transparent;"> acsByIndex="false"></div><div style="background-color: transparent;"> <SessionInitiator type="SAML2" acsIndex="1" template="bindingTemplate.html"/></div><div style="background-color: transparent;"> <SessionInitiator type="Shib1" acsIndex="5"/></div><div style="background-color: transparent;"> </SessionInitiator></div><div
style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, June 28, 2013 2:29 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Unable to parse SAML attributes and redirecting the request
back to the URL<br> </font> </div> <div class="y_msg_container"><br>On 6/28/13 2:08 PM, "Justin Russo" <<a ymailto="mailto:justin9@ymail.com" href="mailto:justin9@ymail.com">justin9@ymail.com</a>> wrote:<br>><br>>for cookieprops attribute i have the data as below<br>>cookieProps="; path=/; secure; HttpOnly"<br><br>And that's guaranteed to loop when you start with http to access a secured<br>page.<br><br>>do you suggest i provide any info which might help us diagnose the<br>>reason its behaving as is ?<br><br>There is nothing you can provide short of a trace of every HTTP<br>transaction involved. But you can do that yourself.<br><br>All the information needed to understand the sequence is here:<br><br><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/FlowsAndConfig" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/FlowsAndConfig</a><br><br>That plus a Live Headers trace with Firefox almost always
shows the<br>problem.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>