Using Shibboleth with multiple domains

[Peter Schober]

* Bai Shen <baishen.lists at gmail.com> [2012-04-04 20:17]:
> On Tue, Apr 3, 2012 at 5:18 PM, Peter Schober <peter.schober at univie.ac.at>wrote:
> > * Bai Shen <baishen.lists at gmail.com> [2012-04-03 22:16]:
> > > Is this possible with Shibboleth?
> >
> > Yes. Shibboleth uses only host cookies so DNS domains do not factor
> > into the workings of the protocol,
> 
> That doesn't seem right.  Googling for host cookie seems to imply that it
> is something like www.example.com whereas a domain cookie would be .
> example.com  Both are using the same domain.  This is the way all of the
> multi-domain examples I encountered are worded.

Shared domains or not do not factor in the workings. That logically
follows from the use of host cookies, since a cookie scoped to a
specific host will not be sent to any other host by a conforming user
agent -- independent of whether they might share a domain
component/root.
>From that it also logically follows that you may well have entities
sharing DNS domains/roots, but that's a special case of "works
independently from any shared domains" then.
-peter