Session Closes on Browser Close

[Manuel Haim]

I guess you could write your own custom login handler (for the IdP) and
let the user choose to remember his login (on the IdP login page).
Technically, you would then set a cookie which survives after closing
the browser. However, this would mean that anybody who opens the browser
thereafter (or gets hold of the cookie) would get authenticated in the
user's name, which especially on shared PCs would mean a security flaw.

-Manuel


Am 03.07.2013 16:15, schrieb Saurabh Tyagi:
> Thanks you Nikolaus and Peter.
> 
> My excat need is SSO on web. But that not fulfilling as session expires on
> browser close.
> 
> 
> 
> Thanks and Regards
> Saurabh Tyagi
> 
> 
> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
> Behalf Of Peter Schober
> Sent: Wednesday, July 03, 2013 6:59 PM
> To: users at shibboleth.net
> Subject: Re: Session Closes on Browser Close
> 
> * Ortner Nikolaus <N.Ortner at fh-kaernten.at> [2013-07-03 15:12]:
>> SSO could also be: have me logged in in all (in-house) applications
>> with the credentials I used when logging in to the computer without
>> ever entering my username/password a second time (something like
>> this integrated windows authentication-thing).
> 
> Right. In this case the SP's session expires, the IdP's ("SSO")
> session expires but you still get SSO from the non-SAML based
> SSO-system managed on your computer (i.e., Kerberos).
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
> 
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>