Persistent Cookies with Shibboleth IDP?

Cantor, Scott cantor.2 at osu.edu
Mon Aug 5 17:05:08 EDT 2013


On 8/5/13 4:54 PM, "Byte Flinger" <byteflinger at gmail.com> wrote:

>I have made some tests myself using latest chrome and, at least with its
>default cookie settings, it removed the cookie after closing it.

That would be news to me, everybody has indicated Chrome doesn't do this
anymore.

>I know that due to the open nature of Shibboleth I could literally just
>change the code but I was thinking more along the lines of something
>simpler like extending the username/password login handler. I thought the
>idp_session cookie code was at Shibboleth's
> core but maybe I need to look at the code again.

It is in the core. The only viable way would probably a Java filter.

-- Scott




More information about the users mailing list