dhorbyspringer

Ah, that’s where it is.

Thanks Rogerio

We had the same problem here which caused problems with a lot of institutional logins. I found that the problem was in ./saml2/jsp/spAssertionConsumer.jsp where it does the following check on the response size:

// to avoid dos attack
// or use SAML2Utils?
try {
SAMLUtils.checkHTTPContentLength(request);…[Read more]