The SAML XML.org web site is not longer accepting new posts. Information on this page is preserved for legacy purposes only. For current information on SAML, please see the OASIS Security Services Technical Committee Wiki.
Common domain cookies
Forum topic: Submitted by lavinek on Fri, 2009-10-23 21:00.
I have been tasked with an integration that includes an IdP and an SP on the same domain. Our original idea was to use the SAML POST bindings to establish authentication and for logout requests. My question is, can I incorporate common domain cookies to make my job easier? I'm fairly new to the SAML standard, so I apologize if the answer is obvious.
Search
SUBSCRIBE
RECENT CONTENT
- SAML Wiki Knowledgebase
10 years ago - SAML 2.0 with java Sample
10 years ago - Govt Computer News: 'The power of one password'
10 years ago
1 reply - OASIS approves SAML 2.0 Errata
10 years ago
1 reply - IBM Pushes Federated Identity Management
10 years ago
1 reply - VMware Unveils Horizon App Manager
10 years ago
1 reply
Navigation
Currently online: 3 guests and 0 users:
Do you mean common domain
Do you mean common domain cookies in the "SAML discovery profile" sense, or just the generic point that you have a shared domain? If you only have one IdP, you don't need a discovery solution.
SAML, and most other SSO mechanisms, assume no shared domain because it's much simpler to do SSO when you can do it with a cookie exchange. You probably don't need SAML at all if you have one, but if you use SAML, the profile should already tell you what you need to know. A common domain doesn't enter into it.