<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Assuming I found the correct notes, I see this section (which I think is the correct focus):</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<session-config></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<session-timeout>15</session-timeout></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<cookie-config></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<!-- Comment name and path to revert __Host- protection. --></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<name>__Host-JSESSIONID</name></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<path>/</path></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<http-only>true</http-only></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<secure>true</secure></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<!-- Uncomment if needed when deploying on EE10/Servlet6+. --></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<!--</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<attribute></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<attribute-name>SameSite</attribute-name></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<attribute-value>None</attribute-value></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</attribute></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
--></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</cookie-config></div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<tracking-mode>COOKIE</tracking-mode></div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
</session-config></div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Do I need to be uncommenting the SameSite / None section, commenting out the name/path parameters, or both?</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks</div>
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Dave</div>
<div id="Signature" class="elementToProof">
<div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
_________________________________________________</div>
<table style="border-collapse: collapse; border-spacing: 0px; box-sizing: border-box;">
<tbody>
<tr>
<td style="padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 96.45pt;">
<p class="elementToProof" style="line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 10pt;"><b>Dave Perry</b></span><span style="font-family: "Times New Roman", serif; font-size: 12pt;"><br>
</span><span style="font-family: Arial, sans-serif; font-size: 9pt;">Application Analyst
<b>| </b>Innovation & Technology Services<br>
<br>
York St John University </span></p>
<p class="elementToProof" style="line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 9pt;">Lord Mayor’s Walk, York, YO31 7EX<br>
T: +44(0)1904 876 0000<br>
</span><a href="mailto:d.perry1@yorksj.ac.uk" id="OWAf5a103b4-30a2-2a02-1f7f-31f74a7d2567" class="OWAAutoLink" title="mailto:d.perry1@yorksj.ac.uk" style="margin-top: 0px; margin-bottom: 0px;">d.perry1@yorksj.ac.uk</a><span style="font-family: Arial, sans-serif; font-size: 9pt;">
<b>| </b><a href="http://www.yorksj.ac.uk/" id="OWA826ee37b-47d1-bd27-49ee-7beb23f8eac7" class="OWAAutoLink" style="margin-top: 0px; margin-bottom: 0px;">www.yorksj.ac.uk</a> </span></p>
</td>
</tr>
<tr>
<td style="padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 74.7pt;">
<p class="elementToProof" style="margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 12pt;"><b><img style="max-width: 100%; margin-top: 0px; margin-bottom: 0px;" size="12155" data-outlook-trace="F:1|T:1" src="cid:736bb276-4d7e-4a68-a66b-accd0d9dc188"> </b></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr style="display: inline-block; width: 98%;">
<div id="divRplyFwdMsg">
<div style="direction: ltr; font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>From:</b> users <users-bounces@shibboleth.net> on behalf of Dave Perry via users <users@shibboleth.net><br>
<b>Sent:</b> Wednesday, July 15, 2026 9:22 AM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Dave Perry <d.perry1@yorksj.ac.uk><br>
<b>Subject:</b> Re: Timeout errors happening regularly</div>
<div style="direction: ltr;"> </div>
</div>
<table align="left" cellspacing="0" cellpadding="0" border="0" style="direction: ltr; width: 100%;">
<tbody>
<tr>
<td style="direction: ltr; background-color: rgb(255, 185, 0); padding: 5pt 2pt;">
</td>
<td style="direction: ltr; background-color: rgb(255, 248, 229); padding: 5pt 4pt 5pt 12pt; width: 100%;">
<div style="direction: ltr; color: rgb(34, 34, 34);"><b>Caution:</b> Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.</div>
</td>
</tr>
</tbody>
</table>
<div style="direction: ltr;"><br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Scott</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Assuming proxied authentication covers using 365 instead of LDAP to authenticate users, that is what I need to look at.</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I found it mentioned here:</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500367/ReleaseNotes#5.2.0-(January-29,-2026)" id="OWA713a810d-9e3b-2b54-c757-56c0a8b75303" class="OWAAutoLink" originalsrc="https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500367/ReleaseNotes#5.2.0-(January-29,-2026)" data-auth="NotApplicable">https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500367/ReleaseNotes#5.2.0-(January-29,-2026)</a></div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Is this the correct thing to try next?</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks</div>
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Dave</div>
<div id="x_Signature">
<div style="direction: ltr; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="direction: ltr; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);">
_________________________________________________</div>
<table style="direction: ltr; box-sizing: border-box; border-collapse: collapse; border-spacing: 0px;">
<tbody>
<tr>
<td style="direction: ltr; padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 96.45pt;">
<p style="direction: ltr; line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 10pt;"><b>Dave Perry</b></span><span style="font-family: "Times New Roman", serif; font-size: 12pt;"><br>
</span><span style="font-family: Arial, sans-serif; font-size: 9pt;">Application Analyst
<b>| </b>Innovation & Technology Services<br>
<br>
York St John University </span></p>
<p style="direction: ltr; line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 9pt;">Lord Mayor’s Walk, York, YO31 7EX<br>
T: +44(0)1904 876 0000<br>
</span><a href="mailto:d.perry1@yorksj.ac.uk" id="OWAddd9ce0b-2a0d-cde6-ef80-9cecc2b3515c" class="x_OWAAutoLink" title="mailto:d.perry1@yorksj.ac.uk" style="margin-top: 0px; margin-bottom: 0px;">d.perry1@yorksj.ac.uk</a><span style="font-family: Arial, sans-serif; font-size: 9pt;">
<b>| </b><a href="http://www.yorksj.ac.uk/" id="OWA81d35730-412c-6110-69bc-63b985210e4c" class="x_OWAAutoLink" data-auth="NotApplicable" style="margin-top: 0px; margin-bottom: 0px;">www.yorksj.ac.uk</a> </span></p>
</td>
</tr>
<tr>
<td style="direction: ltr; padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 74.7pt;">
<p style="direction: ltr; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="font-family: Arial, sans-serif; font-size: 12pt;"><b><img style="max-width: 100%; margin-top: 0px; margin-bottom: 0px;" size="12397" data-outlook-trace="F:2|T:2" src="cid:b5f53d72-ece2-4f59-b32f-27449393cbc1"> </b></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<hr style="direction: ltr; display: inline-block; width: 98%;">
<div id="x_divRplyFwdMsg">
<div style="direction: ltr; font-family: Calibri, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<b>From:</b> users <users-bounces@shibboleth.net> on behalf of Scott Cantor via users <users@shibboleth.net><br>
<b>Sent:</b> Monday, July 6, 2026 4:45 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Scott Cantor <scott@restingparrotsoftware.com><br>
<b>Subject:</b> Re: Timeout errors happening regularly</div>
<div style="direction: ltr;"> </div>
</div>
<div style="direction: ltr; font-size: 11pt;">Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.<br>
<br>
<br>
On Jul 6, 2026, at 11:14 AM, Dave Perry via users <users@shibboleth.net> wrote:<br>
><br>
> The Timeout error (represented by stale. in the messages.properties file) is happening so often now, our library are saying that students are reporting that the link doesn't work at all. This will be from on and off campus, so a mix of browsers and devices/setups.<br>
><br>
> Is there any way of reducing this?<br>
<br>
Do the tracing and cookie analysis to determine the actual cause I suppose.<br>
<br>
A "link" is itself a red flag, but it would depend what the link has in it.<br>
<br>
Others have encountered the fact that in 5.2+ you have to address SameSite via web.xml if you're impacted by that and I documented that in the release notes, but that only applies for the most part to proxied authentication.<br>
<br>
-- Scott<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" id="OWAa4f07de1-3e56-eaf4-a02e-cd7de963dae6" class="OWAAutoLink" originalsrc="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" data-auth="NotApplicable">
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C02%7Cd.perry1%40yorksj.ac.uk%7C749ed65ae40f4b0ddddc08dedb75de7d%7C5c8ae38ef85b4309b7ec862815a37aee%7C0%7C0%7C639189496453397794%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=sIxDF5OYc%2FY0NbSMjqzp5xBgLSUcfHmwfNPvbYs%2BpVg%3D&reserved=0</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</div>
</body>
</html>