Same ShibSP session across two vhosts?
Peter Schober
peter.schober at univie.ac.at
Fri Oct 21 13:49:55 BST 2011
* Alex Mihičinac <alexm at arnes.si> [2011-10-21 14:32]:
> I'm trying to figure out how to setup SP, which would handle two
> vhosts with the same session (using ApplicationOverride).
> Is that scenario possible at all? In documentation I found only the
> other way around, where one SP acts like two independent SPs.
The first issue is cookies, since only host cookies are used by
default. Once you change that (assuming those vhosts share a common
DNS domain) there still may or may not be an issue with local sessions
being (not) found by the SP.
If the aim is to avoid having users click "login" you could use
isPassive and automatically try to log them in, but personally I think
this creates more confusion when people access one site and are
instantly being redirected back (with or without being logged after
that).
-peter
More information about the users
mailing list