CAS And Shibboleth SSO

[Cantor, Scott]

On 8/2/17, 5:13 PM, "users on behalf of David C Fuhs" <users-bounces at shibboleth.net on behalf of dfuhs at csuchico.edu> wrote:

> Adding idp.server_hostname to the logging output made the problem obvious: the logs showed the CAS clients pointing to shib
> -upgrade.csuchico.edu, while the Shibboleth clients were pointing to shibboleth.csuchico.edu.  Obviously, the IdP is validating the
> hostname the clients call.

No, it's just that cookies are scoped based on the hostname. Your browser ended up with different cookies scoped to two different names.

-- Scott