session id and ip address

Bryan K. Walton bwalton+1525274800 at leepfrog.com
Wed May 2 11:47:26 EDT 2018


We are an SP working with a university who is requesting that the
Shibboleth session IDs for their application not be locked to a client's
IP address.

They say that, in their environment, a user will authenticate with one
IP address, but after authenticaiton, may be bounced to another node
with a different IP.  They are wondering if it is possible to create
session IDs that trust an IP range and/or subnet.

Is this possible with Shibboleth?

Thanks!
Bryan


More information about the users mailing list