[JIRA] Commented: (SDSJ-92) Allow the SamlCookiePlugin to be used for more than just "_saml_idp"

[Rod Widdowson (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SDSJ-92?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13751#comment-13751 ] 

Rod Widdowson commented on SDSJ-92:
-----------------------------------

Given the legal issues I am fighting to do with planting cookies for some of the DS's I manage UI am blowing much colder on this idea.

I'll note however that this would fit very neatly into the plugin framework that the current DS already has.  Clone the code inside edu.internet2.middleware.shibboleth.wayf.plugins.provider.SamlCookiePlugin code (http://svn.shibboleth.net/view/java-centralized-discovery/branches/REL_1/src/main/java/edu/internet2/middleware/shibboleth/wayf/plugins/provider/SamlCookiePlugin.java?view=markup) modify it in the obvious way and inject it in inside wayfconfig.xml

> Allow the SamlCookiePlugin to be used for more than just "_saml_idp"
> --------------------------------------------------------------------
>
>                 Key: SDSJ-92
>                 URL: https://issues.shibboleth.net/jira/browse/SDSJ-92
>             Project: Shibboleth Discovery Service - Java
>          Issue Type: New Feature
>    Affects Versions: 1.1.1
>            Reporter: Bradley Schwoerer
>            Assignee: Rod Widdowson
>            Priority: Minor
>             Fix For: 1.2
>
>
> For our deployment we are using the "_saml_idp" cookie as a permanent cookie when the user selects "remember me".  We do not use alwaysFollow as it is not granular enough on a permanent basis.  Instead we have deployed a two cookie approach.  "_saml_idp" scoped at ".wisconsin.edu" or ".wisc.edu" depending upon the DS.  We also are using "_saml_idp.session" scoped at the host level as a session cookie.  The "_saml_idp.session" is set no matter if the user selects remember me or not.  We also set alwaysFollow on the "_saml_idp.session".  This has the effect that after a person goes through the wayf they don't have to select it again for that session, and during the next session it will be hinted.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira