2 SP's, Domain cookie + host cookie conflicts?

[Cantor, Scott]

On 7/27/15, 2:35 PM, "users on behalf of Michael Berkowski" <users-bounces at shibboleth.net on behalf of mjb at umn.edu> wrote:

>Preliminary testing has been promising, but we recognize this is not a
>supported behavior. Is it likely that other.example.com can correctly 
>negotiate the two cookies and choose the one which identifies a valid session 
>on that server every time?  Will it attempt to load sessions from both cookies 
>and safely ignore the example.com session?

It definitely won't read both cookies. It's going to derive the cookie name to use and then attempt to find it. The default cookie name is an undocumented behavior, currently it happens to depend on the applicationId and the entityID of the SP.

If you're trying to do this, you should really set cookieName explicitly on one or both SPs to avoid a conflict.

-- Scott