Embedded Discovery Service for multiple SPs?
Rainer Hoerbe
rainer at hoerbe.at
Thu Dec 15 16:31:07 EST 2016
> Am 15.12.2016 um 18:13 schrieb Cantor, Scott <cantor.2 at osu.edu>:
>
>> IIRC the DP discovery profile does not specify a normative protocol for
>> setting the common domain cookie. A deployment profile would have to do
>> this. Why not use an extended version of the CDS to serve as cookie
>> setter/getter?
>
> There's no profile for the cookie approach because the code on both sides of a common cookie domain are the same party. You're talking to yourself.
>
> The answer to why not is that's a really heavy solution to something you can do with a shell script.
But managing common domains would incur some administrative overhead. I think that extending the CDS + the SP EDS - which is needed anyway - as a cookie manager for all the other domains would be simpler to manage. A difference would be that the SP, not the IDP would have to set the cookie.
- Rainer
More information about the users
mailing list