Accessed Denied Error in Chrome

We updated from 1.1.1 to 1.1.5 and all of a sudden started getting an access denied error for all users when running a Chrome browser. We did not see the issue when running Safari for whatever reason.

This is what we’re seeing in logs.

2021-05-17T11:16:06.992-05:00 | ERROR 2021-05-17 16:16:06,991 views.post:398 21 140332912957248 Received SAMLResponse when no request has been made.
-- | --
  | 2021-05-17T11:16:06.992-05:00 | Traceback (most recent call last):
  | 2021-05-17T11:16:06.992-05:00 | File "/home/fmapp/.local/lib/python3.7/site-packages/djangosaml2/views.py", line 369, in post
  | 2021-05-17T11:16:06.992-05:00 | outstanding_queries)
  | 2021-05-17T11:16:06.992-05:00 | File "/home/fmapp/.local/lib/python3.7/site-packages/saml2/client_base.py", line 812, in parse_authn_request_response
  | 2021-05-17T11:16:06.992-05:00 | xmlstr, AuthnResponse, "assertion_consumer_service", binding, **kwargs
  | 2021-05-17T11:16:06.992-05:00 | File "/home/fmapp/.local/lib/python3.7/site-packages/saml2/entity.py", line 1455, in _parse_response
  | 2021-05-17T11:16:06.992-05:00 | response = response.loads(xmlstr, False, origxml=xmlstr)
  | 2021-05-17T11:16:06.992-05:00 | File "/home/fmapp/.local/lib/python3.7/site-packages/saml2/response.py", line 534, in loads
  | 2021-05-17T11:16:06.992-05:00 | "Unsolicited response: %s" % self.in_response_to)
  | 2021-05-17T11:16:06.992-05:00 | saml2.response.UnsolicitedResponse: Unsolicited response: id-Ba4hyBvDckZzQYhaz
  | 2021-05-17T11:16:07.052-05:00 | Forbidden: /saml2/acs/
  | 2021-05-17T11:16:07.052-05:00 | WARNING 2021-05-17 16:16:07,052 log.log_response:230 21 140332912957248 Forbidden: /saml2/acs/

[Amertz08]

The cookie secure setting seemed to fix it.

[peppelinux]

Yes, feel free to put a Word in the official doc if needed