Login across SPs, one IdP

[Cantor, Scott]

On 9/13/11 11:36 PM, "Charity Sipe" <orders at charitylynn.net> wrote:
>
>* In shibboleth2.xml, added a domain name to cookieProps in order be sure
>the cookie is shared across the domain, ie,

Unless you're also sharing a session cache, that's not enough to cluster
it. Just because the cookie is sent doesn't mean a copy of the session
magically exists. The state is server-side, it won't fit in a cookie.

-- Scott