Single Log Out with multiple domains
Oleg Kostenko
oleg.kostenko at actimind.com
Fri Dec 2 08:06:21 EST 2016
02.12.2016 14:07, Peter Schober:
> Domains (shared or not) do not factor into SAML, at all.
> So whatever you think is the reason for your SLO failing has nothing
> to do with the fact that two (or 42) SPs share a common DNS domain or
> not.
> -peter
My scenario is quite the opposite: single SP is shared between two domains.
You say it doesn't matter, but the fact is, it does, because with single
domain everything works fine. It might have nothing to do with SAML, but
it definitely has something to do with Shibboleth due to it's web nature
and the fact that browsers do not share cookies between domains.
What I'm trying to understand is whether there's a failure in my
configuration or Shibboleth wasn't designed to be used this way.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161202/9414e9d2/attachment.html>
More information about the users
mailing list