<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div><br>
</div>
<blockquote type="cite">
<div>Not the one I'm talking about. If it's a SAML 1 SP, and you're not pushing attributes, then yes, it will query for them. That's back channel, there's no user involved.</div>
<div><br>
</div>
<div>I'm talking about two explicit requests for authentication, front channel.</div>
</blockquote>
<div><br>
</div>
<div>Thanks for the clarification. It would indeed be using SAML 1 since we're still working to push out SAML 2.</div>
<div><br>
</div>
<blockquote type="cite">
<div>But are there two authentication requests or not?</div>
</blockquote>
<div><br>
</div>
<div>I'm not entirely sure how to tell that. But if it's where you would see "InitializeAuthenticationContext" in the logs on such a request, then yes, there are 2 requests, behavior that I don't see in the log when I try another SP.</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div>Brandon McKean</div>
<div><br>
</div>
<div>On Tue, 2015-08-04 at 16:54 +0000, Cantor, Scott wrote:</div>
<blockquote type="cite">
<pre>On 8/4/15, 12:44 PM, "users on behalf of McKean, Brandon Scott - mckeanbs" <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:mckeanbs@jmu.edu">mckeanbs@jmu.edu</a>> wrote:
<blockquote type="cite">
I think I understand what you mean here. From what I can tell from the logs, it goes through all the way through to "record response complete", and then it starts anew with another AttributeQuery. Am I understanding correctly that that portion is another request to it?
</blockquote>
Not the one I'm talking about. If it's a SAML 1 SP, and you're not pushing attributes, then yes, it will query for them. That's back channel, there's no user involved.
I'm talking about two explicit requests for authentication, front channel.
<blockquote type="cite">
Unfortunately there doesn't seem to be a difference between them at that portion.
</blockquote>
But are there two authentication requests or not?
-- Scott
</pre>
</blockquote>
</body>
</html>