Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


solid
Panel
borderColorred
borderStyle
Expand
titleAnswerProblem: Redirect loop occurs after a login


  1. Problem with invalid SameSite configuration

The problem is that the SameSite cookie attribute is not set, while the correct configuration would be SameSite=None. In certain situations, some browsers will discard such cookie when switching between different domains, as is the case in SSO authentication. We believe that this causes problems for some of your users when they are trying to connect to UNIC SP.

Figure 1. Example of well set SameSite cookies



More on SameSite cookie atribute can be found at: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite

Also, m2. Make sure that your Idp IdP delivers the following mandatory eduGain attributes to the UNIC SP:

  • schacHomeOrganization
  • eduPersonScopedAffiliation
  • schacPersonalUniqueCode





Expand
titleQ: After login a redirect loop occurs.Problem: Denied access to UNIC Virtual Campus after authentication


Problem with login due to undelivered atributes


Image Added

Figure 2. Problem with login due to undelivered atributes





In order to access UNIC Virtual Campus some attributes must be delivered by Identity Provider. If a person can't access UNIC Virtual Campus due to message shown in Figure 2.,  it is necessary to contact the administrator of the Identity provider at home institution to check whether the specified attributes are delivered.

A:
Problem with invalid SameSite configuration

The problem is that the SameSite cookie attribute is not set, while the correct configuration would be SameSite=None. In certain situations, some browsers will discard such cookie when switching between different domains, as is the case in SSO authentication. We believe that this causes problems for some of your users when they are trying to connect to UNIC SP.

Image Removed

Figure 1. Example of well set SameSite cookies

More on SameSite cookie atribute can be found at: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite

Also, make sure that your Idp delivers the following mandatory eduGain attributes to the UNIC SP:

  • schacHomeOrganization
  • eduPersonScopedAffiliation
  • schacPersonalUniqueCode