<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I have an Apache site hosted in AWS on EC2, with an ELB with SSL termination in front, and the Shibboleth SP 2.5.3 protecting from the root down. The site loops indefinitely, and I can’t understand why.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">When I hit the site, Shibboleth returns an AuthnRequest and redirects me to the IDP, the IDP authenticates me, my browser POSTs the assertion back to the ACS URL on the site, the POST returns a 302 and redirects me to the root of the site.
At this point, Shibboleth returns another AuthnRequest and the process begins all over again.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have handlerSSL set to false, cookieProps set to https, and Apache has the proper canonical name for the domain. I see in the Shibboleth log file that the POST is creating the session, so why am I stuck in a loop here?<o:p></o:p></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" style="margin-left:5.4pt;border-collapse:collapse">
<tbody>
<tr>
<td width="163" valign="top" style="width:1.7in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</td>
<td width="216" valign="top" style="width:2.25in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</td>
</tr>
<tr>
<td width="163" valign="top" style="width:1.7in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><img width="146" height="159" id="Picture_x0020_1" src="cid:image001.png@01D22BB1.975791B0" alt="cid:image001.png@01D01537.F005A230"><o:p></o:p></span></p>
</td>
<td width="216" valign="top" style="width:2.25in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><span style="color:#1F497D"><br>
</span><b><span style="font-size:12.0pt;color:#1F497D">James W. Anderson<o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="color:#1F497D">Cloud Infrastructure Architect<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">The Coca-Cola Company<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">404.676.4914 Office<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">770.653.1033 Mobile<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">404.598.4914 Fax<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><a href="mailto:jamesanderson@coca-cola.com"><span style="color:blue">jamesanderson@coca-cola.com</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
CONFIDENTIALITY NOTICE<br>
NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended
recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete
it from your system. Thank You.<br>
</font><br>
<hr>
<font face="Arial" color="Black" size="2"><br>
</font>
</body>
</html>