<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body>
Hi Scott,<br /><br />thank you.<br /><br />About this your quote: "However, I can promise you that if nobody files a RFE for it, it's not happening."<br /><br />I'm <span class="Y2IQFc" style="white-space: pre-wrap;"><span class="Y2IQFc" style="white-space: pre-wrap;">trying to open a jira</span></span><span class="Y2IQFc"> without success.</span><span class="Y2IQFc" style="white-space: pre-wrap;"><span class="Y2IQFc" style="white-space: pre-wrap;"><br /></span></span>
<div id="tw-target-text-container" class="tw-ta-container F0azHf tw-nfl"><span class="Y2IQFc">I registered at this website:</span></div>
<span class="Y2IQFc" style="white-space: pre-wrap;"><span class="Y2IQFc" style="white-space: pre-wrap;"><br />https://shibboleth.atlassian.net/jira/software/c/projects/IDP/issues/?filter=allissues<br /><br />But after the registration and email confirmation, when I try to login the system tells </span></span><span class="Y2IQFc">me I don't have</span><span class="Y2IQFc" style="white-space: pre-wrap;"><span class="Y2IQFc"> access to Jira at shibboleth.atlassian.net.<br /><br /></span></span>
<div id="tw-target-text-container" class="tw-ta-container F0azHf tw-nfl">
<pre id="tw-target-text" class="tw-data-text tw-text-large tw-ta" style="text-align: left;" dir="ltr" data-placeholder="Traduzione"><span class="Y2IQFc">Am I on the correct site?<br /><br />IJ.<br /></span></pre>
</div>
<br />
<p>Il 06.12.2022 14:54 Cantor, Scott ha scritto:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">We have in production the idp shibboleth v2 and SSO works, but if we remove the LoginHandler when we define previous session like AuthenticationMethod the SSO stop to works.</blockquote>
<pre>That was a V2 feature to address SSO, yes. It was all or nothing, it doesn't "group" SPs. It sounds like you weren't really thinking that it did, so I would start by probably not worrying as much about "new" capabilities until you figure out the basic ones.</pre>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">If SSO is enabled by default we probably have some customization that disables it but at the moment we don't understand which one.</blockquote>
<pre>I would doubt you could have customized the IdP so much to start with that it would have prevented that.</pre>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">SSO doesn't work</blockquote>
<pre>SSO is automatic, so there's nothing I can tell you except that you have a deployment issue of some sort, and the logs are quite vocal about things when it comes to what it's doing with the session.
If you don't get SSO, you have a session validation issue preventing its use, a problem with the session storage mechanism you picked, and/or an issue with services requesting something that prevents the use of SSO (e.g., ForceAuthn).</pre>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">A new feature (using v4) that we would like to bring into production, that arises from market needs, was that of being able to create groupings of SPs, I didn't think it was a complex issue.</blockquote>
<pre>It is. I'm not disputing that your requirement exists, I'm just telling you the facts,</pre>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%">It would be very useful..</blockquote>
<pre>That I would tend to dispute, however, since in 20 years nobody has seriously asked for such a feature. But it might be useful to *you*.
However, I can promise you that if nobody files a RFE for it, it's not happening.
-- Scott
</pre>
</blockquote>
</body></html>
<br><br/><br/>VOUCHER CONNETTIVITÀ per P.IVA e PMI: internet a canone 0 per 48 mesi. ATTIVA ORA<br />
<a href='https://casa.tiscali.it/promo/?u=https://promozioni.tiscali.it/voucher_business/?r=TS00000A00025&dm=link&p=tiscali&utm_source=tiscali&utm_medium=link&utm_campaign=voucherbusiness&wt_np=tiscali.link.footermail.voucherbusiness.btb..' target='_blank'>https://casa.tiscali.it/promo/?u=https://promozioni.tiscali.it/voucher_business/</a><br/><br/>