Single Log Out with multiple domains

Oleg Kostenko oleg.kostenko at actimind.com
Fri Dec 2 08:06:21 EST 2016


02.12.2016 14:07, Peter Schober:
> Domains (shared or not) do not factor into SAML, at all.
> So whatever you think is the reason for your SLO failing has nothing
> to do with the fact that two (or 42) SPs share a common DNS domain or
> not.
> -peter

My scenario is quite the opposite: single SP is shared between two domains.

You say it doesn't matter, but the fact is, it does, because with single 
domain everything works fine. It might have nothing to do with SAML, but 
it definitely has something to do with Shibboleth due to it's web nature 
and the fact that browsers do not share cookies between domains.

What I'm trying to understand is whether there's a failure in my 
configuration or Shibboleth wasn't designed to be used this way.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161202/9414e9d2/attachment.html>


More information about the users mailing list