ADFS and Shibboleth Using "MSISIPSelectionPersistent"

[Aaron Howell]

Sorry I will clarify on the wiki

In our environment we currently do not use any other options, so we are able to do enforce this behaviour. I should clarify that it is an optional step.

So we actually set this cookie in the Load Balancer in front of our ADFS servers. It is added to the cookies on the incoming request before being passed through, it is never actually sent to the client at all. Even if the client already has this set, we swap it on the fly for the behaviour we are enforcing. 

On 24 Jan 2014, at 6:06 am, bleb1982 <btl at fischerinternational.com> wrote:

> I found this information on the confluence website. My question is. Does each
> client have to set the MSISIPSelectionPersistent cookie, or can this be set
> automatically for all users in ADFS?
> 
> When landing on the ADFS, user will be presented with an option to
> authenticate with AD or Shibboleth. To automatically select Shibboleth over
> AD, we insert a cookie "MSISIPSelectionPersistent" with a Base64 value of
> the EntityID for the Shibboleth IdP:
> e.g. echo -n https://idp.example.com/idp/shibboleth | base64
> aHR0cHM6Ly9pZHAuZXhhbXBsZS5jb20vaWRwL3NoaWJib2xldGg=
> 
> 
> 
> --
> View this message in context: http://shibboleth.1660669.n2.nabble.com/ADFS-and-Shibboleth-Using-MSISIPSelectionPersistent-tp7594227.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone.

Deakin University does not warrant that this email and any attachments are error or virus free.