Shibboleth-Authentication, RichTextComponent and IE8+

[Tiago]

Hello all,

i discovered a really esoteric problem when shibboleth is used as an authentication method. The authentication itself works well, I'm redirected to our login page and after a successful login, back to the main page of my OTRS.

But, if I use the Internet Explorer version 8 and above, instead of the main content of an article the login page is shown again. It looks rather strange, because all other components of OTRS are displayed correctly.

The problem seems to be, that the rich text component is invoked as an iframe and the IE8+ does not send the session-id when requesting the iframe. Without this id, shibboleth redirects to the login page again. Only IE8+ behaves in this way, Firefox and Chrome are working as expected.

When the RichTextComponent is disabled, no iframes are used for the main content of articles and the problem does not occur. But this is just a work around.

Any hints on how to solve or avoid the problem are very welcome.

Thanks in advance

Tiago