<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
In reference to my last email, here's a debug log dump from an IDP node for one of the tests through samltest.id that generates the Stale Request error:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
2023-04-25 14:41:50,579 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.CheckMessageVersionHandler' on INBOUND
message context
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.saml1.binding.impl.SAML1ArtifactRequestIssuerHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLProtocolAndRoleHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:131] - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching RelyingPartyContext based on SAML peer https://samltest.id/saml/sp</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:253] - Resolving relying party configuration</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:265] - Checking if relying party configuration EntityNames[https://samltest.id/saml/sp,] is applicable</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:267] - Relying party configuration EntityNames[https://samltest.id/saml/sp,] is applicable</div>
<div class="ContentPasted0">2023-04-25 14:41:50,594 - DEBUG [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:174] - Profile Action SelectRelyingPartyConfiguration: Found relying party configuration EntityNames[https://samltest.id/saml/sp,] for
request</div>
<div class="ContentPasted0">2023-04-25 14:41:50,610 - DEBUG [net.shibboleth.idp.profile.interceptor.impl.PopulateProfileInterceptorContext:147] - Profile Action PopulateProfileInterceptorContext: No inbound interceptor flows active for this request</div>
<div class="ContentPasted0">2023-04-25 14:41:50,610 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.security.impl.ReceivedEndpointSecurityHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.security.impl.MessageReplaySecurityHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurityHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.saml2.binding.security.impl.SAML2AuthnRequestsSignedSecurityHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPRedirectDeflateSignatureSecurityHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.saml2.binding.security.impl.SAML2HTTPPostSimpleSignSecurityHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.messaging.handler.impl.CheckMandatoryIssuer'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
<div class="ContentPasted0">2023-04-25 14:41:50,625 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeOutboundMessageContext:153] - Profile Action InitializeOutboundMessageContext: Initialized outbound message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:401] - Profile Action PopulateBindingAndEndpointContexts: Attempting to resolve endpoint of type {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService
for outbound message</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:542] - Profile Action PopulateBindingAndEndpointContexts: Populating template endpoint for resolution from SAML AuthnRequest</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.profile.impl.PopulateBindingAndEndpointContexts:452] - Profile Action PopulateBindingAndEndpointContexts: Resolved endpoint at location https://samltest.id/Shibboleth.sso/SAML2/POST
using binding urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:382] - No AttributeConsumingService was resolved, won't be able to determine delegation requested status via metadata</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:515] - No AttributeConsumingService was available</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:500] - Delegation request was not explicitly indicated, using default value: NOT_REQUESTED</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:289] - Issuance of a delegated Assertion is not in effect, skipping further processing</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:290] - Profile Action PopulateEncryptionParameters: No encryption requested, nothing to do</div>
<div class="ContentPasted0">2023-04-25 14:41:50,641 - DEBUG [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:143] - Profile Action ExtractSubjectFromRequest: No Subject NameID/NameIdentifier in message needs inbound processing</div>
<div class="ContentPasted0">2023-04-25 14:41:50,657 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:169] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of type 'org.opensaml.saml.saml2.binding.impl.ExtractProxiedRequestersHandler'
on INBOUND message context</div>
<div class="ContentPasted0">2023-04-25 14:41:50,657 - DEBUG [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:190] - Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on message context containing a message of type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'</div>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
Any thoughts from anyone? I am very rusty with Shib.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
Thank you!</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
-Tim<br>
</div>
<div class="elementToProof">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; font-family: Calibri, Arial, Helvetica, sans-serif; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px; margin:0in 0in 0pt">
<span style="font-family: "Arial", "sans-serif"; font-size: 10pt; color: black;"></span></p>
<p class="x_MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(33, 33, 33);">
<b><span style="font-family: Arial, sans-serif; color: rgb(31, 73, 125);"></span></b></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><a name="_MailAutoSig"><b><span style="font-family: "Arial", sans-serif; color: rgb(31, 73, 125);"></span></b></a></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><b><span style="font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">Tim Enders</span></b></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">Associate Director, IT Infrastructure<br>
</span></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">Servers and Storage<br>
</span></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><img class="EmojiInsert" alt="1518788691975_Loyola.jpg" style="font-size:12pt" data-outlook-trace="F:1|T:1" src="cid:7f8c53dc-b225-4c1f-9011-d984494562f0"><br>
</p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">4501 N. Charles Street</span></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">Baltimore, MD 21210</span></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);"><a href="mailto:tenders@loyola.edu">tenders@loyola.edu</a></span></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">Office- 410-617-2542</span></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);">www.loyola.edu</span></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px"><a href="http://www.twitter.com/LoyolaMaryland"><span style="font-size: 10pt; font-family: Arial, sans-serif; color: rgb(31, 73, 125);"></span></a><span style="font-size: 10pt; font-family: "Arial", sans-serif; color: rgb(31, 73, 125);"></span></p>
<p class="x_MsoNormal" style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(33, 33, 33);">
<a href="http://www.twitter.com/LoyolaMaryland" target="_blank"><span style="font-size: 10pt; font-family: Arial, sans-serif; text-decoration: none; color: rgb(31, 73, 125);"></span></a></p>
<p style="margin-top:0px; margin-bottom:0px"></p>
<p class="MsoNormal" style="margin-top:0px; margin-bottom:0px; margin:0in 0in 0pt">
<font face="Calibri"></font></p>
<div><font size="2" face="Tahoma"></font></div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Timothy Enders via users <users@shibboleth.net><br>
<b>Sent:</b> Tuesday, April 25, 2023 10:30 AM<br>
<b>To:</b> users@shibboleth.net <users@shibboleth.net><br>
<b>Cc:</b> Timothy Enders <tenders@loyola.edu><br>
<b>Subject:</b> [EXTERNAL] Using Azure Application Gateway in front of IDPv4 - Stale Request error</font>
<div> </div>
</div>
<style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<p></p>
<div style="background-color:#FFEB9C; width:100%; border-style:solid; border-color:#9C6500; border-width:1pt; padding:2pt; font-size:10pt; line-height:12pt; font-family:Calibri; color:Black; text-align:left">
<strong><span>Sender is external to Loyola</span></strong></div>
<br>
<p></p>
<div>
<div class="x_elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
Hi all:</div>
<div class="x_elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
We are trying to put our (Windows) Shibboleth IDP servers in Azure, behind an Azure Application Gateway v2.</div>
<div class="x_elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
We have the Application Gateway configured, and it properly passes traffic to the Shibboleth nodes, has session stickiness, etc. If you visit
<a href="https://idpurlgoeshere/idp/shibboleth" id="LPlnk821473">https://idpurlgoeshere/idp/shibboleth</a> you get the metadata page as expected.</div>
<div class="x_elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<br>
</div>
<div class="x_elementToProof" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0); background-color:rgb(255,255,255)">
However, when we try to test an auth flow (using samltest.id) Shibboleth <i>immediately</i> returns a Stale Request error, before it tries to process an auth flow or do anything else.<br>
</div>
<div class="x_elementToProof">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
My suspicion is that there's something that the App Gateway is doing when it passes the request from the user to Shibboleth that's causing Shibboleth to think the request is invalid and so it's throwing the Stale Request, but I don't know what.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Has anyone else here done this config before? Any thoughts?</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Thank you!<br>
</div>
<div id="x_Signature">
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; font-family:Calibri,Arial,Helvetica,sans-serif; color:rgb(0,0,0); background-color:rgb(255,255,255)">
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin:0in 0in 0pt">
<span style="font-family:"Arial","sans-serif"; font-size:10pt; color:black"></span></p>
<p class="x_x_MsoNormal" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33)">
<b><span style="font-family:Arial,sans-serif; color:rgb(31,73,125)"></span></b></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><a name="x__MailAutoSig"><b><span style="font-family:"Arial",sans-serif; color:rgb(31,73,125)"></span></b></a></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><b><span style="font-family:"Arial",sans-serif; color:rgb(31,73,125)">Tim Enders</span></b></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)">Associate Director, IT Infrastructure<br>
</span></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)">Servers and Storage<br>
</span></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><img class="x_EmojiInsert" alt="1518788691975_Loyola.jpg" style="font-size:12pt" data-outlook-trace="F:2|T:2" src="cid:b4fad983-ce33-4619-93ac-f369954bd6dc"><br>
</p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)">4501 N. Charles Street</span></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)">Baltimore, MD 21210</span></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)"><a href="mailto:tenders@loyola.edu">tenders@loyola.edu</a></span></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)">Office- 410-617-2542</span></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)">www.loyola.edu</span></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px"><a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.twitter.com%2FLoyolaMaryland&data=05%7C01%7Ctenders%40loyola.edu%7Cd0355446d216482d575308db4599a9c3%7C30ae0a8f3cdf44fdaf34278bf639b85d%7C0%7C0%7C638180298511338271%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ammGRWF0%2Fb9f6lBibNZ4JOVh92FFwnvjggnNIeimfjk%3D&reserved=0" originalsrc="http://www.twitter.com/LoyolaMaryland" shash="eRa0ydI72kQX6u0BVdAHyvkwx4RQQvizxVJX0LAMWVYJQgZo/f+ufuGITwT7Q+bkdqmJjHRZvQ8vaicDvovmzbWmcqpzHHXh6tOIY/hRK4n9JHKnfN/iFvh61GuZGOpd3+Rp5S1Euwk/A8u/FDMIvFLbyCPT4tYNjI3TjqbQPm8="><span style="font-size:10pt; font-family:Arial,sans-serif; color:rgb(31,73,125)"></span></a><span style="font-size:10pt; font-family:"Arial",sans-serif; color:rgb(31,73,125)"></span></p>
<p class="x_x_MsoNormal" style="margin:0in 0in 0.0001pt; font-size:11pt; font-family:Calibri,sans-serif; color:rgb(33,33,33)">
<a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.twitter.com%2FLoyolaMaryland&data=05%7C01%7Ctenders%40loyola.edu%7Cd0355446d216482d575308db4599a9c3%7C30ae0a8f3cdf44fdaf34278bf639b85d%7C0%7C0%7C638180298511338271%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ammGRWF0%2Fb9f6lBibNZ4JOVh92FFwnvjggnNIeimfjk%3D&reserved=0" originalsrc="http://www.twitter.com/LoyolaMaryland" shash="eRa0ydI72kQX6u0BVdAHyvkwx4RQQvizxVJX0LAMWVYJQgZo/f+ufuGITwT7Q+bkdqmJjHRZvQ8vaicDvovmzbWmcqpzHHXh6tOIY/hRK4n9JHKnfN/iFvh61GuZGOpd3+Rp5S1Euwk/A8u/FDMIvFLbyCPT4tYNjI3TjqbQPm8=" target="_blank"><span style="font-size:10pt; font-family:Arial,sans-serif; text-decoration:none; color:rgb(31,73,125)"></span></a></p>
<p style="margin-top:0px; margin-bottom:0px"></p>
<p class="x_MsoNormal" style="margin-top:0px; margin-bottom:0px; margin:0in 0in 0pt">
<font face="Calibri"></font></p>
<div><font size="2" face="Tahoma"></font></div>
</div>
</div>
</div>
</div>
<br>
<p align="Center" style="font-family:Calibri; font-size:10pt; color:#000000; margin:5pt">
Loyola University Maryland Internal Use Only<br>
</p>
</div>
<br>
<p align="Center" style="font-family:Calibri; font-size:10pt; color:#000000; margin:5pt">
Loyola University Maryland Internal Use Only<br>
</p>
</div>
<br>
<p style="font-family:Calibri;font-size:10pt;color:#000000;margin:5pt;" align="Center">
Loyola University Maryland Internal Use Only<br>
</p>
</body>
</html>