<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10px"><div><span></span></div><div class="qtdSeparateBR">What is very odd is that I have about 500 or so orgs that connect through my shib box. 4 out of those report this issue. 3 are through Okta (the other 15 or so Okta connections that I have are fine) and one in the middle east. <br><br></div> <div class="yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 10px;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Sunday, October 26, 2014 10:28 AM, "Cantor, Scott" <cantor.2@osu.edu> wrote:<br> </font> </div> <br><br> <div class="y_msg_container">On
10/26/14, 1:10 PM, "Mike Flynn" <<a shape="rect" ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br clear="none"><br clear="none">>So is it possible the issue is the client's cookie and a clear of said<br clear="none">>cookie might resolve this?<br clear="none"><br clear="none">No, the problem is the flow through the overall process, your security and<br clear="none">TLS settings, their browser, the cookies being set, etc.<br clear="none"><br clear="none">Looping can only be debugged by tracing affected transactions and<br clear="none">analyzing where the flow isn't working correctly.<br clear="none"><br clear="none">The discovery part is irrelevant. The issue is that your SP is no longer<br clear="none">successfully getting a session set up with their browser.<div class="yqt5813608111" id="yqtfd82686"><br clear="none"><br clear="none">-- Scott<br clear="none"><br
clear="none">-- <br clear="none">To unsubscribe from this list send an email to <a shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>