Search code examples
.netsingle-sign-onsaml-2.0shibbolethkentor-authservices

Cause of infinite redirects loop between IDP and SP

I am troubleshooting the problem related to infinite redirects with Kentor Authservices on SP side and Shibboleth clone on IDP side. My question is what could be the possible causes of this and how can I intercept and log Kentor's decision to redirect back to IDP?

Solution

  • This is usually the case when you have authorization sections in the web.config and have set up ~/AuthServices/SignIn as the sign in url with <authentication mode="forms">.

    If that is the case, try temporarily setting up another sign in url that doesn't trigger a redirect to the Idp directly. It can be a simple page that just contains a link to ~/AuthServices/SignIn.

    Then use Fiddler or your browser's debug tools to see the redirect sequence. That's the right way to start troubleshooting even if my guess above about the web.config settings is incorrect.