<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div><div><div>I just managed to solve this particular problem by setting:</div><div><br></div><div>idp.session.StorageService=shibboleth.StorageService</div><div><br></div><div>For server side storage service</div><div><br></div><div>/Stefan</div><div><div id="MAC_OUTLOOK_SIGNATURE"></div></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style="font-weight:bold">From: </span> users <<a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a>> on behalf of Stefan Santesson <<a href="mailto:stefan@aaa-sec.com">stefan@aaa-sec.com</a>><br><span style="font-weight:bold">Reply-To: </span> Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br><span style="font-weight:bold">Date: </span> Monday 21 December 2015 at 20:00<br><span style="font-weight:bold">To: </span> Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br><span style="font-weight:bold">Subject: </span> Re: Need to modify AuthnContextClassRef in ExternalAuth<br></div><div><br></div><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div><div><div>Scott and Cristopher</div><div><div id=""></div></div></div></div><div><br></div><span id="OLK_SRC_BODY_SECTION"><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div dir="ltr"><div>Does the problem happen only when you enable shibboleth.authn.External.addDefaultPrincipals and request a specific auth type or all of the time? Did you create your own principal class - which might have serialization issues? <br></div></div></blockquote></span><div><br></div><div>No I have tried turning that on and off. Same problem.</div><div><br></div><span id="OLK_SRC_BODY_SECTION"><blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div dir="ltr"><div><br></div><div>Did this problem happen before you upgraded to 3.2.1?<br></div></div></blockquote></span><div><br></div><div>Never.</div><div><br></div><div><br></div><div><div style="font-family: Consolas, monospace; font-size: 12px;">The profile flow isn't performing the "load" step required by the new client storage plugin. That's handled automatically by the standard flows, so I have to assume this isn't a standard one and your customization is out of sync with the IdP's core code.</div><div style="font-family: Consolas, monospace; font-size: 12px;"><br></div><div style="font-family: Consolas, monospace; font-size: 12px;">-- Scott</div></div><div><br></div><div><br></div><div>This is a standard auth/External flow (if that counts as a standard flow).</div><span id="OLK_SRC_BODY_SECTION"><div class="gmail_extra"><div class="gmail_quote">I have read something in the documentation “<a href="https://wiki.shibboleth.net/confluence/display/IDP30/StorageConfiguration">https://wiki.shibboleth.net/confluence/display/IDP30/StorageConfiguration</a>” that there is a new web storage plugin to be used instead of the cookie-based storage plugin.</div></div></span><div>I have tried commenting away in web.xml everything related to cookie based storage as suggested in the documentation.</div><div><br></div><div>The result is that my IdP does not store any cookie, nor any web storage in my web browser.</div><div><br></div><div>I have turned on idp.storage.htmlLocalStorage=true</div><div><br></div><div>No luck here. At all.</div><div><br></div><div>How do can I perform the “load” step required?</div><div><br></div><div>/Stefan</div></div></div>
--
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></blockquote></span></body></html>