Shibboleth Developers

[Patrik Schnellmann <>]

> Meaning what, no Set-Cookie, or no Cookie sent back afterward? I don't know
> > of any bug here, not for a while, so I'll test it (again) when I have a
> > chance. I don't test with IIS all that often, maybe the cookie setter 
> > broke.
There's no Set-Cookie for the Shib Session. Set-Cookie for _saml_idp is there.

> > I assume this isn't just an http server with a cookieProps of "secure"?
No, it's not. I took the config files which were installed with the MSI
package and didn't change anything in the config except for the necessary
parameters / files.

Using ACS on http with handlerSSL="false" doesn't work either.

-- Patrik