<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div dir="ltr" id="yui_3_16_0_1_1426268087031_3275"><span>Thanks much.</span></div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Courier New, courier, monaco, monospace, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Thursday, March 12, 2015 2:48 PM, "Cantor, Scott" &lt;cantor.2@osu.edu&gt; wrote:<br> </font> </div>  <br><br> <div class="y_msg_container">On 3/12/15, 4:54 PM, "Mike Flynn" &lt;<a shape="rect" ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>&gt; wrote:<br clear="none"><br clear="none">&gt;&nbsp; &nbsp;  &lt;!-- The RequestMap defines portions of the webspace to protect --&gt;<br clear="none">&gt;&nbsp; &nbsp;  &lt;RequestMapper type="Native"&gt;<br clear="none">&gt;&nbsp; &nbsp; &nbsp; &nbsp;  &lt;RequestMap applicationId="default"&gt;<br clear="none">&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  &lt;Host name="shib.lynda.com"&gt;<br clear="none">&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  &lt;Path name="InCommon" authType="shibboleth" requireSession="true"/&gt;<br clear="none">&gt;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;  &lt;/Host&gt;<br clear="none">&gt;&nbsp; &nbsp; &nbsp; &nbsp;  &lt;/RequestMap&gt;<br clear="none">&gt;&nbsp; &nbsp;  &lt;/RequestMapper&gt;<br clear="none">&gt;<br clear="none">&gt;<br clear="none">&gt;That's what I have set so yes - sessions are required...<br clear="none"><br clear="none">Then it's "looping", it's just a single loop ending at the WAYF page again. Tracing the URLs and cookies in a browser would illustrate it, otherwise it's not going to be very evident why.<br clear="none"><br clear="none">Whatever it's doing, there's no session cookie or at least no valid one on the request back to /InCommon, so it kicks off a request to the WAYF.<div class="yqt2793005639" id="yqtfd10444"><br clear="none"><br clear="none">-- Scott<br clear="none"><br clear="none">-- <br clear="none">To unsubscribe from this list send an email to <a shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br clear="none"></div><br><br></div>  </div> </div>  </div> </div></body></html>