Embedded Discovery Service for multiple SPs?

Rainer Hoerbe rainer at hoerbe.at
Thu Dec 15 16:31:07 EST 2016


> Am 15.12.2016 um 18:13 schrieb Cantor, Scott <cantor.2 at osu.edu>:
> 
>> IIRC the DP discovery profile does not specify a normative protocol for
>> setting the common domain cookie. A deployment profile would have to do
>> this. Why not use an extended version of the CDS to serve as cookie
>> setter/getter?
> 
> There's no profile for the cookie approach because the code on both sides of a common cookie domain are the same party. You're talking to yourself.
> 
> The answer to why not is that's a really heavy solution to something you can do with a shell script.

But managing common domains would incur some administrative overhead. I think that extending the CDS + the SP EDS - which is needed anyway - as a cookie manager for all the other domains would be simpler to manage. A difference would be that the SP, not the IDP would have to set the cookie.

- Rainer


More information about the users mailing list