<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hello,<br><br>We are noticing an increasing number of session removals due to a network change at client's location where the user's IP address is changing mid session. We end up with IP address mismatch and the session gets removed. Following are 2 threads that I thought captured a lot of the detail surrounding this issue<br><br><a href="http://shibboleth.1660669.n2.nabble.com/IP-address-mismatch-issues-td7586969.html" target="_blank">http://shibboleth.1660669.n2.nabble.com/IP-address-mismatch-issues-td7586969.html</a><br><a href="http://shibboleth.1660669.n2.nabble.com/Shibboleth-library-shutting-down-several-times-per-day-td7591326.html#a7591331" target="_blank">http://shibboleth.1660669.n2.nabble.com/Shibboleth-library-shutting-down-several-times-per-day-td7591326.html#a7591331</a><br><br>Following is an excerpt from the second link above<br><br>*****************************************************************************<br><span>>How does this interact with a wireless connection that roams between
</span><br><span>>multiple access points and may actually change the workstation <span class="bold highlight search-highlight">IP</span> <span class="bold highlight search-highlight">address</span>?
</span><br><br><span>It makes cookie-based security pretty much a joke. There's nothing I can
</span><br><span>do to fix that. My personal opinion is that that's a bad thing to change
</span><br><span>the <span class="bold highlight search-highlight">address</span>, but if that's what you do, then you can either rely on SSO to
</span><br><span>rollover the session silently, or turn off your <span class="bold highlight search-highlight">address</span> checks.
</span><br><br><span>-- Scott
</span><br>*****************************************************************************<br><br>1. Wanted to find how others are handling these issues? <br>2. Is it possible to rollover the session silently in Shib-SP? <br><br>Thanks<br>Ragadeep<br><br><br> </div></body>
</html>