sharepoint 2010 - ADFS/SSO : Infinite loop when using iframe in SP2010 to load external application because of IE security settings -
we're experiencing same problems. have sp2010 adfs in place. in iframe we're loading external application configured use adfs.
if place on page can open external app without logging in singlesignon works.
however if load external application in iframe experience problems.
if run fiddler see calls made see "normal" adfs flow. when adfs return redirect url of external app fedauth cookies provided not included in post-request external app. since external app not recieve cookies end in infinite loop.
the problem caused ie treating authentication cookie third party cookie. it's security settings prevent adding cookie request. when change ie privacy settings low (accept cookies) works fine.
does have idea how can fix this?
we have resolved issue once putting dummy "starting" page sharepoint users first hit page , forced authenticate in adfs.
then, on subsequent page have iframe. if iframe doesn't cookies container page, doesn't matter - context redirected adfs, adfs issues token silently (as user authenticated in adfs) , application hosted in iframe processes token.
i not sure why expect adfs response application carry cookies? never so, carries saml token in response body.
Comments
Post a Comment