edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

[eduGAIN-discuss] IdP Session Issue - Automatic Login

From: Andreas Theodorou <andreas.theodorou AT cynet.ac.cy>
To: "'edugain-discuss AT lists.geant.org'" <edugain-discuss AT lists.geant.org>
Subject: [eduGAIN-discuss] IdP Session Issue - Automatic Login
Date: Fri, 30 Jun 2023 07:57:12 +0000
Accept-language: en-GB, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cynet.ac.cy; dmarc=pass action=none header.from=cynet.ac.cy; dkim=pass header.d=cynet.ac.cy; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=zWOpeKfFFOdpZykTRbH8gDCX1FAhJJU7nXcxrLe7kWA=; b=PQsthwh/s315uRA/ACbNB1iiGjxypLj1Z3oblstzlSF2dLYcEDlON9G8T3QLPSROW/+dpIpaehLckYYIhc/2K2q/rk+zZpBanX2NakLkO331fwcmwYa4oqAD66L8jijpUdhp/xwuwdJ4U1NOZj+4aJy5hy0S0StbwbeyLhdFW/Rs+M9AwBZpZTELDhQOz944Bb5i/D73FhAgxgr8LESSD8/+ovjT1uxEwyPPjPd1jxRkt/mfndD5UhsZsVJi0GVOWeRNiqXBL4LOtZpmX2L0l2VwM+oHC2So7by8pmuu8+VsndZtKEeQuClsSx7WzsG8Oo1DRGgxI3zy2B67G4B1Rg==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ENv2795RioGvURruzUjsRdtDLSuDTxOjqnX8/ujNN40kb59vtqLofVHltdA7y4KcBpUUT8dTh7ewforkmasJEs5O6V8xvSY8UqFnwckXXPBxI84OMPIBggmOINyKkoxL1EvxKSGxOqWySANae0j3ec7hvcZ60+90y/WUZiG4GrwmcwoBcNOpsqOhHN4xbfRR3AOBfEh+myUPtpHyDH6QqGWgoKrvbMeP23C4pCiTbLWZX0WeMfpHFei5BLUpyruglczrX/VRLGECRHKTT5eR9sizrMVb9pnxm/iFY2qdfGyir5K0M7CNePGAgh1OghLl/2QrryVXcu1Vcim7yGLlDg==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cynet.ac.cy;

Good morning, eduGAIN Team,

I am writing to report an issue regarding my IdP.

The issue arises when a user logs out of the system and then attempts to log in again. Instead of being prompted for his email and password, the user is automatically logged in without any authentication prompts.

I have noticed that if the user clears his cookies and browser history before attempting to log in again, the system behaves as expected and prompts him for his credentials.

However, this is not practical as we need to fix the configuration to ensure proper authentication without requiring users to clear their browsing data.

Upon reviewing the idp.properties file, it’s not clear which parameter needs to be modified.

I kindly request your assistance in resolving this issue.

Kind regards,

Andreas.

[eduGAIN-discuss] IdP Session Issue - Automatic Login, Andreas Theodorou, 06/30/2023
- Re: [eduGAIN-discuss] IdP Session Issue - Automatic Login, Peter Brand, 30-Jun-2023