State Information Lost Error

[Jay George]

Hi All,

   I am trying to integration simplesamlphp with wso2 identity server. I am able to get the login page on Idp(wso2) from simplesamlphp installation page but when it returns back to simplesamlphp I get a state information lost error.

   my Idp is running in http://wso2:9443

   simple saml is running under http://magento-dev.local/simplesaml.

   Do we have to have the IdP running in the same domain as simplesaml?.

Regards

Jay

[Peter Schober]

* Jay George <georg...@gmail.com> [2014-09-28 20:52]:

> I am trying to integration simplesamlphp with wso2 identity server. I am
> able to get the login page on Idp(wso2) from simplesamlphp installation
> page but when it returns back to simplesamlphp I get a state information
> lost error.

Maybe this will help:

https://code.google.com/p/simplesamlphp/wiki/LostState

That does not seem to be included in the SSP documentation (which it
should be, IMO). Not sure it's even linked from the docs.

> my Idp is running in http://wso2:9443
> simple saml is running under http://magento-dev.local/simplesaml.
>
> Do we have to have the IdP running in the same domain as simplesaml?.

No, SAML has been designed for cross-domain SSO, i.e., domains do not
factor into this at all.
-peter