Questions starting to implement Shibboleth IDP

[Cantor, Scott]

> Does that work or am I off base?  If I'm off base, can you give me any
> suggestions.

It works at a high level, but you're glossing over the fact that passing control to some other system and back *is* SSO. You can't just do a redirect there. That requires a SSO protocol. Like, say, SAML. Or CAS. Or making the cookies on app.mysite.com global to mysite.com and then implementing a security mechanism within the cookie to prevent tampering. Etc.

-- Scott