<div dir="ltr"><span style="font-family:arial,sans-serif;font-size:13px">Sorry to bore list members with yet another &quot;looping&quot; issue.  As our IdP operator I&#39;m trying to assist on-premises WordPress service provider.  We&#39;ve reviewed the document at </span><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping" target="_blank" style="font-family:arial,sans-serif;font-size:13px">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLooping</a><span style="font-family:arial,sans-serif;font-size:13px"> and used SAML Tracer to track exactly what URLs are being used:</span><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">target:          <a href="https://communitydev.uaf.edu/wp-admin" target="_blank">https://communitydev.uaf.edu/wp-admin</a></div><div style="font-family:arial,sans-serif;font-size:13px">redirects to: <a href="https://idp.alaska.edu/idp/Authn/MCB" target="_blank">https://idp.alaska.edu/idp/Authn/MCB</a></div><div style="font-family:arial,sans-serif;font-size:13px">ACS:            <a href="https://communitydev.uaf.edu/Shibboleth.sso/SAML2/POST" target="_blank">https://communitydev.uaf.edu/Shibboleth.sso/SAML2/POST</a></div><div style="font-family:arial,sans-serif;font-size:13px">resource:     <a href="https://communitydev.uaf.edu/shibboleth.sso/Login" target="_blank">https://communitydev.uaf.edu/shibboleth.sso/Login</a></div><div style="font-family:arial,sans-serif;font-size:13px">re-directs to target to re-loop through these same URLs</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">The SP creates and stores a _shibsession_.. cookie in the browser,</div><div style="font-family:arial,sans-serif;font-size:13px"><div class="" dir="ltr"><div id=":56t" class="" title="Download" tabindex="0"><div class=""></div></div><div id=":56u" class="" title="Save to Drive" tabindex="0"><div class=""><div class=""><div></div><div class=""></div></div></div></div></div></div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">and the IdP creates and stores an _idp_session cookie that is modified each loop through.</div><div style="font-family:arial,sans-serif;font-size:13px"><div class="" dir="ltr"><div id=":56w" class="" title="Download" tabindex="0"><div class=""></div></div><div id=":56x" class="" title="Save to Drive" tabindex="0"><div class=""><div class=""><div></div><div class=""></div></div></div></div></div><br></div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">No part of this leaps out to me and I&#39;m tempted to just point the finger back to the </div><div style="font-family:arial,sans-serif;font-size:13px">behavior of the target, but perhaps one of you can tell me how else to be helpful</div><div style="font-family:arial,sans-serif;font-size:13px">to the service owner?</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">David Bantz</div><div style="font-family:arial,sans-serif;font-size:13px">U Alaska </div></div>