ServiceProvider Operation with Dual Stack
On 30.09.2020, the Shibboleth IdentityProvider operated by the IT Center, which is necessary for the use of the RWTH SIngle Sign-On service, was switched to dual stack mode. In dual stack mode the Shibboleth IdentityProvider has an IPv4 and an IPv6 address. To avoid problems with the connected services during this changeover, every ServiceProvider must make the following changeover in the shibboleth2.xml by 29.09.2020:
In the session node the attribute checkAddress must be set to false:
| <Sessions lifetime="28800" timeout="3600" relayState="ss:mem" checkAddress="false" handlerSSL="true" cookieProps="https" |
By default, this attribute is set to true and must therefore be changed. Details about this attribute can be found in the official Shibboleth documentation: https://wiki.shibboleth.net/confluence/display/SP3/Sessions (opens in new tab)
The shibd daemon must then be restarted.
