1 files changed, 6 insertions, 1 deletions
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/VerifyAuthenticationBlockServlet.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/VerifyAuthenticationBlockServlet.java
index 09e4e957d..be5dbb96a 100644
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/VerifyAuthenticationBlockServlet.java
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/VerifyAuthenticationBlockServlet.java
@@ -147,6 +147,7 @@ public class VerifyAuthenticationBlockServlet extends AuthServlet {
     {
       Logger.error("Parsing mulitpart/form-data request parameters failed: " + e.getMessage());
       throw new IOException(e.getMessage());
+      
     }
 		String sessionID = req.getParameter(PARAM_SESSIONID);
 		String createXMLSignatureResponse = (String)parameters.get(PARAM_XMLRESPONSE);
@@ -187,11 +188,15 @@ public class VerifyAuthenticationBlockServlet extends AuthServlet {
 					
 					// redirect url
 					// build redirect(to the GetMISSessionIdSerlvet)
+					
+					//change MOASessionID before MIS request
+					String newMOASessionID = AuthenticationSessionStoreage.changeSessionID(session);
+					
 			        redirectURL =
 			              new DataURLBuilder().buildDataURL(
 			                session.getAuthURL(),
 			                GET_MIS_SESSIONID,
-			                session.getSessionID());
+			                newMOASessionID);
 					
 			        String oaURL = session.getOAURLRequested();
 			        OAAuthParameter oaParam = authConf.getOnlineApplicationParameter(oaURL);