Missing cHash value after response from IdP

[doemedia]

I use SSO for the frontend login with EXT:fe_login.
As soon as I have successfully entered my access data in the mask of the IdP (NetIQ), I am redirected back to TYPO3 via POST.
However, I get a 404 page with the message that the cHash is empty.
In the middleware “AcsSaml” the cHash would have to be added to the query parameters.

Is the problem known and are you working on a solution?

I am using the current TYPO3 v12.4 with php 8.2 and EXT:md_saml v3.0.5

Translated with DeepL.com (free version)

[rr-it]

Configure [FE][cacheHash][excludedParameters] to include redirect_url,loginProvider,login-provider,login_status,logintype,acs.

[audef1]

rr-it, i have the same error, but excluding the parameters doesnt solve my problem. Is there another workaround?

[rr-it]

The list wasn't complete. Configure [FE][cacheHash][excludedParameters] to include:

redirect_url,loginProvider,login-provider,login_status,logintype,loginType,acs,mdsamlmetadata,sls,SAMLResponse,RelayState,SigAlg,Signature

Please give feedback if this solves the issue.

[audef1]

Thanks for the fast reply. Unfortunately this didnt solve our problem. We went for a workaround, using custom PageErrorHandler, that returns us to the login page instead of the 404 page.