Login to a third party SAML app that's in an iFrame

[Cantor, Scott]

On 8/4/14, 12:22 PM, "Eric Goodman" <Eric.Goodman at ucop.edu> wrote:
>
>So my question is: How should one authenticate the SAML SP protected
>application that's hosted in the iFrame? The design goal is to keep the
>content of that application within the iFrame (securely).

Unless you're prepared to live with specific third party cookie settings,
you can't. There was a thread about it recently wherein somebody asked
about some SP changes, and that helps to a degree, but fundamentally it
depends on whether the IdP can get cookies set or not.

-- Scott