Investigate multiple authn attempts to google gateway from https://dyfi.cobwebproject.eu/shibboleth

[alexstuart]

Authentication requests from the Dyfi SP have a particular pattern of 6 (or more?) AuthnRequests arriving in a 1 second period with different values of the session key (e.g. [87de26b98a] below). Then more AuthnRequests that get assigned the same session.

1. Why the multiple AuthnRequests?
2. Why does simpleSAMLphp settle into a single session?

Dec 03 07:02:04 simplesamlphp INFO [87de26b98a] SAML2.0 - IdP.SSOService: Accessing SAML 2.0 IdP endpoint SSOService
Dec 03 07:02:04 simplesamlphp INFO [1e6207ad96] SAML2.0 - IdP.SSOService: Accessing SAML 2.0 IdP endpoint SSOService
Dec 03 07:02:04 simplesamlphp INFO [5ce2402acb] SAML2.0 - IdP.SSOService: Accessing SAML 2.0 IdP endpoint SSOService
Dec 03 07:02:04 simplesamlphp INFO [62e7ef7123] SAML2.0 - IdP.SSOService: Accessing SAML 2.0 IdP endpoint SSOService
Dec 03 07:02:04 simplesamlphp INFO [1677315d9f] SAML2.0 - IdP.SSOService: Accessing SAML 2.0 IdP endpoint SSOService
Dec 03 07:02:04 simplesamlphp INFO [70f856a4fe] SAML2.0 - IdP.SSOService: Accessing SAML 2.0 IdP endpoint SSOService
Dec 03 07:02:04 simplesamlphp DEBUG [87de26b98a] Received message:
Dec 03 07:02:04 simplesamlphp DEBUG [1e6207ad96] Received message:
Dec 03 07:02:04 simplesamlphp DEBUG [1e6207ad96] <samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://dyfi.cobwebproject.eu/Shibboleth.sso/SAML2/Artifact" Destination="https://cobweb-gw.edina.ac.uk/simplesaml/saml2/idp/SSOService.php" ID="_631a0d60a395343e8a1c4adaf4513d5a" IssueInstant="2014-12-03T07:02:04Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Version="2.0">
Dec 03 07:02:04 simplesamlphp DEBUG [1e6207ad96] <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://dyfi.cobwebproject.eu/shibboleth/saml:Issuer
Dec 03 07:02:04 simplesamlphp DEBUG [1e6207ad96] <samlp:NameIDPolicy AllowCreate="1"/>
Dec 03 07:02:04 simplesamlphp DEBUG [1e6207ad96] /samlp:AuthnRequest