<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">One possible explanation for what you are seeing is that you did not "strictly do an upgrade", you changed some of the property values to the new values used in IdP 5. Including the <span style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0);">idp.cookie.path = /. There are good reasons for that change related to security, but it did cause problems with some users' SSO session not seeming to be active/"honored".</span><div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div><font color="#000000">The folks who had problems were running browsers that were caching the cookies from the IdP, and still had left over cookies from when the cookie path was /idp in IdP v4. And their browser was returning the wrong cookie to the IdP. Have any such users be sure to remove all cached cookies and try again.</font></div><div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);"><br></span></font></div><div><font color="#000000"><span style="caret-color: rgb(0, 0, 0);">If that isn't your problem, then no other ideas come immediately to mind.</span></font></div><div><br></div><div><div><blockquote type="cite"><div>On Feb 4, 2025, at 6:47 AM, Cantor, Scott via users <users@shibboleth.net> wrote:</div><br class="Apple-interchange-newline"><div><div><blockquote type="cite">Can please someone have a look on this?<br></blockquote><br>"Somebody" is welcome to, but I am not in a position to debug your IdP for you. See list footer for why.<br><br>You need to start with your logs. If it's reporting a failure to reuse a session or a login result, it's going to say something about that. If it's not seeing a session, then that's a different sort of issue.<br><br>-- Scott<br><br><br>-- <br>For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw<br>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br></div></div></blockquote></div><br><div>
<div>--<br>Michael A. Grady<br>IAM Architect, Unicon, Inc.</div><div><br></div><br class="Apple-interchange-newline">
</div>
<br></div></body></html>