For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nland_178813's avatar
nland_178813
Icon for Nimbostratus rankNimbostratus
Dec 22, 2014

Session deleted due to user logout request?

Hello. I currently have SAML authentication set up, and it works well most of the time. However, I keep getting the following sporadically: 2014-12-22 13:20:35 Received User-Agent header: Mozilla...
BIG-IP Access Policy Manager (APM)
saml
security
Vinne73's avatar
Vinne73
Icon for Cirrus rankCirrus
Sep 24, 2018

Is there any news on this? I have the same problem.

 

My BigIP/APM is a SAML SP. I use Shibboleth as IdP. This works 99% of the time. The other 1 procent gives errors. Browsers might show the error "Invalid nonce"

 

What my logs show:

 

apmd[13185]: 01490266:7: /Common/UA:UAnet:1f3c043d: ApmD.cpp: 'process_apd_request()': 1815: ** done with the request processing ** tmm[19269]: 01490501:5: /Common/UA:UAnet:1f3c043d: Session deleted due to user logout request.

 

Which is not true, the user did not ask for a logout.