<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div>I had a follow up on this one. It looks like a few years ago, someone from this SP posted on this mailing list, indicating they are using Shibboleth SP or at least did at some point.</div>
<div><br>
</div>
<div>Is there any particular setting(s) in that where double logins might be caused from clients going from IDP v2 to v3?</div>
<div><br>
</div>
<div>Thanks for any information you can provide on this.</div>
<div><br>
</div>
<div><br class="Apple-interchange-newline">
<span style="font-family: monospace; white-space: pre;">-- Brandon McKean IT / Systems Linux Administrator (540)568-4235</span></div>
<div><br>
</div>
<div>On Mon, 2015-07-27 at 15:47 +0000, McKean, Brandon Scott - mckeanbs wrote:</div>
<blockquote type="cite">
<blockquote type="cite">
<div>Assuming it's a full round trip twice, then I think the SP has to be causing that through its own behavior.</div>
</blockquote>
<div><br>
</div>
<div>Ok, thanks for the info. In that case I'll see if I can get in contact with them. They're the only SP that has this issue so I'm inclined to agree with you there.</div>
<div><br>
</div>
<blockquote type="cite">
<div>Well, afterward, yes.</div>
</blockquote>
<div><br>
</div>
<div>I think I understand now, I was misinterpreting the log at that point rather than looking further up. It looks like the IDP didn't error out anywhere during that first part of the process.</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div>Brandon</div>
<div><br>
</div>
<div>On Mon, 2015-07-27 at 15:15 +0000, Cantor, Scott wrote:</div>
<blockquote type="cite">
<pre>On 7/27/15, 11:07 AM, "users on behalf of McKean, Brandon Scott - mckeanbs" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:mckeanbs@jmu.edu">mckeanbs@jmu.edu</a>> wrote:
<blockquote type="cite">
We had an issue reported to us today regarding one of the SPs. Namely, when you go to login, it makes you do so twice. That is, when you've logged in, it returns to the IDP login page as if you hadn't logged in at all, and only after logging into the second one does it go back to the SP and continue on.
</blockquote>
Assuming it's a full round trip twice, then I think the SP has to be causing that through its own behavior.
<blockquote type="cite">
Accordingly I've tried studying the idp-process.log results from doing each login. The one thing I can note is that the first, failed one, mentions that no session was found for the client. I find this baffling because in the same log, there is mention of it creating a session.
</blockquote>
Well, afterward, yes.
-- Scott
</pre>
</blockquote>
<pre>--
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre>
</blockquote>
</body>
</html>