Service Provider Operation with Dual Stack
On 30.09.2020, the Shibboleth Identity Provider operated by the IT Center, which is necessary for the use of the RWTH SIngle Sign-On service, was switched to dual stack mode. In dual stack mode the Shibboleth Identity Provider has an IPv4 and an IPv6 address. To avoid problems with the connected services during this changeover, every service provider must make the following changeover in the shibboleth2.xml by 29.09.2020:
In the session node the attribute checkAddress must be set to false:
<Sessions lifetime="28800" timeout="3600" relayState="ss:mem" checkAddress="false" handlerSSL="true" cookieProps="https" |
By default, this attribute is set to true and must therefore be changed. Details about this attribute can be found in the official Shibboleth documentation: https://wiki.shibboleth.net/confluence/display/SP3/Sessions
The shibd daemon must then be restarted.
