Different SessionIndex for each SP

Takeshi NISHIMURA takeshi at nii.ac.jp
Wed Mar 6 14:43:45 EST 2013


Hi all,

Shibboleth IdP seems to provide same SessionIndex (also known as Shib-Session-Index in Shibboleth SP) for all SPs.
I think this SessionIndex combined with eduPersonTargetedID may be accidentally used to track users over SPs.

Is this intended?
Is there any configuration option to use different SessionIndex for each SP?

Sincerely,
Takeshi


More information about the dev mailing list