<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>So I've been rolling out IdP updates using 2.4 as the core over the last few months. One new change noted here:</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigurationChanges#IdPConfigurationChanges-Cookie-RelatedErrorHandlingChange">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPConfigurationChanges#IdPConfigurationChanges-Cookie-RelatedErrorHandlingChange</a></div>
<div><br>
</div>
<div>Seems to be biting me big with Internet Explorer users.</div>
<div><br>
</div>
<div>The crux of the problem is the browser not sending the Shib session cookie for some reason (and that seems very IE specific). In the 2.3 release Shib would send an empty SAML Response to the SP, but now stops with the error message:</div>
<div><br>
</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span><span style="background-color: rgb(255, 255, 255); color: rgb(51, 51, 51); font-family: Arial, sans-serif; line-height: 20px;">Authentication failure, session missing during completion of profile
handler</span></div>
<div><br>
</div>
<div>Driving my customers crazy.</div>
<div><br>
</div>
<div>Has anyone tracked down a reason for this behavior with IE? Something that can be changed server side to deal with it?</div>
<div><br>
</div>
<div>thanks,</div>
<div><br>
</div>
<div>Paul</div>
<br>
<div apple-content-edited="true">Paul Hethmon<br>
Chief Software Architect<br>
<a href="mailto:paul.hethmon@clareitysecurity.com">paul.hethmon@clareitysecurity.com</a><br>
<br>
</div>
<br>
</body>
</html>