Multi-Domain Multi-Server

[Greg Zapp]

Hello,

I was hoping this might be a good place to get some clarification on what's
possible...  I've got some internal tools spread out across at least two
servers on different subdomains of a common top level.  Let's call them
foo.domain.com, bar.domain.com, fuzz.domain.com .  One server is IIS and
the other apache2 on linux(Ubuntu 12.04).  The idP will be ADFS supporting
SAML2.  My question is whether I can have these logically as a single
"application", and also be able to navigate between sites seamlessly after
a single authentication.  I'm looking to use passive on the IIS site and
active on the others...  Is this possible?  Reading the documentation I'm a
bit unclear as to what would happen if the user crossed domains.  Can the
authentication information in the cookie be validated with the idP
seamlessly if the "session" isn't in the SP's cache?

Thanks,
   -Greg
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140613/3feaa629/attachment.html