Nyp.org - Kronosess.nyp.org

Content-Type: text/html; charset=UTF-8
Location: https://kronosess.nyp.org/wfc/logon
Server: 
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Date: Wed, 15 Nov 2023 11:17:31 GMT
Content-Length: 158
Set-Cookie: BIGipServer~KRONOS_traffic_grp-2~kronosess_https_pool=!hQhm8Ec7QVeJl0xky0904AMTO5VQsFjuEVGBBWddtctJjogmjVjPyWnT1PHUPnKJDMSHkDDiu3NXesY=; path=/; Httponly; Secure

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Type: ;charset=utf-8
Content-Language: en-
Location: https://fed.nyp.org/idp/SSO.saml2?SAMLRequest=fZFBT8JAEIX%2FSrN3WrotlGxoE5SDJCjEFk28mKWdwsZ2tu5sUf%2B9taDiQY6TefPmfTNTknXFGzFr7R7v4bUFss57XSGJYydmrUGhJSkSKGsgYXORzm6XgrtD0Rhtda4r5syIwFil8VojtTWYFMxB5bC5X8Zsb21DwvNejEZNQOTiR%2BNqs%2FPeytyr9E7jo7L7zWLOnHmXQKH8svodLKH4GVFF46Xpyu3zMWcxj9lzwWESyTDfRuMgHJc5hLIc8nAShaNRUU6gkxG1sECyEm3M%2BJAHA98f%2BKPM94UfiYC7fsCfmLM%2BEV0pLBTuLuNvjyISN1m2HqxXadYbHFQB5q5TXyBnzgMY6iE7J5ZMexzRxzTnH7icQH6fnSX%2Frpp6597Jqfz78%2BQT&RelayState=
Server: 
Set-Cookie: JSESSIONID=IFAKSXA2Sw1GwtntJhJuIFLuW855R3JPcS4k9wT-.44ad1a4b-6018-4323-9fe6-38d158fb99e2; path=/; secure; HttpOnly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubdomains
Date: Wed, 15 Nov 2023 11:17:31 GMT
Content-Length: 0

HTTP/1.1 200 OK
Date: Wed, 15 Nov 2023 11:17:32 GMT
Referrer-Policy: origin
Content-Security-Policy: default-src 'self' *.nyp.org ; script-src 'self' 'unsafe-inline' 'unsafe-eval' ; object-src 'none' ; frame-ancestors 'self' *.nyp.org *.infor.com *.service-now.com *.sabacloud.com ; child-src *.duosecurity.com
Cache-Control: no-cache, no-store
Pragma: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Type: text/html;charset=utf-8
Set-Cookie: PF=4AmS1XHpQcrg0f1uIIYc5y; Path=/; Secure; HttpOnly; SameSite=None
Content-Length: 6137
Set-Cookie: BIGipServer~INFO-SEC_traffic_grp-2~fed_https_pool=!ERjc1PFBdCSvfP2NaXCGGiywsRUqPkWiSfge09ZkLppzKCFL+3fVPj052OKKHp4Yd8qrNF3dDeH2GPU=; path=/; Httponly; Secure
Strict-Transport-Security: max-age=16070400; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff