<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
Following conclusions on the SameSite testing wiki:<br>
<a
href="https://wiki.shibboleth.net/confluence/display/DEV/IdP+SameSite+Testing">https://wiki.shibboleth.net/confluence/display/DEV/IdP+SameSite+Testing</a><br>
<br>
Since we are using server side session storage, we enabled
htmlLocalStorage:<br>
<blockquote><tt>idp.storage.htmlLocalStorage = true</tt><br>
</blockquote>
verified the ClientStorageServices beans have not been removed:<br>
<blockquote><tt> <util:list
id="shibboleth.ClientStorageServices"></tt><tt><br>
</tt><tt> <ref
bean="shibboleth.ClientSessionStorageService" /></tt><tt><br>
</tt><tt> <ref
bean="shibboleth.ClientPersistentStorageService" /></tt><tt><br>
</tt><tt> </util:list></tt><br>
</blockquote>
and redeployed (to our DEV environment).<br>
<br>
We are now trying to confirm this change will have the desired
affect. Since our attempts to reproduce the SameSite errors prior to
this change were unsuccessful/inconsistent, we don't think thats the
best way for us to test the change.<br>
<br>
Assuming the client-storage-read view is loaded faster than the eye
can see, we've been trying find a way to confirm it is loading.<br>
1. DevTools - Using Chrome DevTools, and Firefox equivalent, we are
only seeing a single request to the IDP with the referrer being the
SP:<br>
<blockquote><tt>Request URL:
<a class="moz-txt-link-freetext" href="https://idp.calpoly.edu/idp/profile/SAML2/POST/SSO">https://idp.calpoly.edu/idp/profile/SAML2/POST/SSO</a></tt><tt><br>
</tt><tt>Request Method: POST</tt><br>
</blockquote>
Should we expect to see a second request here as the
client-storage-read view is rendered?<br>
<br>
2. Logs - Is there anywhere in the logs that would indicate the
client-storage-read view was rendered?<br>
<br>
3. Local Storage - Even though we are using server side session
storage, will enabling local storage cause the IDP to store anything
client side?<br>
<br>
Thanks for any ideas.<br>
Dan<br>
<br>
<div class="moz-signature">-- <br>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<title></title>
Dan Malone<br>
<font color="#999999">Lead Identity Management Architect<br>
Information Technology Services<br>
California Polytechnic State University<br>
San Luis Obispo, California<br>
<br>
Direct 805-756-6326<br>
<a class="moz-txt-link-abbreviated" href="mailto:dmalone@calpoly.edu">dmalone@calpoly.edu</a></font><br>
</div>
</body>
</html>