<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none"><!-- p { margin-top: 0px; margin-bottom: 0px; }--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Thank you for the help! We are using a 2.X version of shibboleth and I realize it's soon to be deprecated but I'd like to get it working anyway if only to better understand the process.<br>
</p>
<p><br>
</p>
<p>So I spent some time and further debugged the issue.<br>
</p>
<p><br>
</p>
<p>We have a production instance of shibboleth and a stage instance. They both talk to the same CAS instance & both use the same version of unicon's shib cas authenticator <a href="https://github.com/Unicon/shib-cas-authenticator">https://github.com/Unicon/shib-cas-authenticator</a>.<br>
</p>
<p><br>
</p>
<p>Our production shibboleth instance works from top to bottom when tested via <a href="https://sp.testshib.org/">
https://sp.testshib.org/</a> <br>
</p>
<p>Our stage shibboleth instance fails upon POSTing to <a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST"></a><a href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST.">https://sp.testshib.org/Shibboleth.sso/SAML2/POST.</a><br>
</p>
<p><br>
</p>
<p>The only difference between the two request flows as far as I can see is that on our stage instance, the '_idp_session' cookie is NOT being set while it is set just fine on our production instance. <br>
</p>
<p><br>
</p>
<p>With this additional information are there any common reasons for an _idp_session_ cookie NOT to be set?<br>
</p>
<p><br>
</p>
<p>Thanks!​<br>
</p>
<p><br>
</p>
<div id="Signature">
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
---
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
</div>
<div>Alex K. Olson</div>
</div>
</div>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>Von:</b> users-bounces@shibboleth.net <users-bounces@shibboleth.net> im Auftrag von Marvin Addison <marvin.addison@gmail.com><br>
<b>Gesendet:</b> Freitag, 28. November 2014 09:03<br>
<b>An:</b> Shib Users<br>
<b>Betreff:</b> Re: Error using CAS & Shibboleth</font>
<div> </div>
</div>
<div>
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
The best choice would probably be to start playing with the 3.0 beta and<br>
the CAS implementation there if you can tolerate a lack of documentation.<br>
</blockquote>
<div><br>
</div>
<div>I have a TODO for documentation in the coming weeks. If you're interested in the CAS protocol support in 3.0, I'd be happy to work with you to get it configured.</div>
<div><br>
</div>
<div>M<a href="mailto:users-unsubscribe@shibboleth.net" target="_blank"></a><br>
</div>
<div><br>
</div>
</div>
</div>
</div>
</body>
</html>