This is an old revision of the document!


SAML Redirect Loop

On July 14th 2020, Chrome rolled out a new behavior for all cookies (https://www.chromestatus.com/feature/5088147346030592). This new mechanism has an effect on all web applications that use an SSO mechanism. Regarding Stages the change has an impact on the SAML login: If Stages is used with an SAML IDP and the user session was timed out, a browser refresh will lead into a redirect loop between the IDP and Stages. As a result the connection to the SAML IDP has to be secure (SSL) otherwise a login of the user is not possible. In any way this is the recommended configuration to connect with the IDP.