Can the _shibboleth_ credentials be transferred?

[Peter Schober]

* Daniel Södling <daniel.sodling at pdsvision.se> [2018-10-16 09:16]:
> Just to clarify, are you saying that the cookie that holds the
> credentials is is no way tied to the machine/address for which it
> was issued?

That was not what I was saying. You /could/ configure the software to
ignore the IP address an HTTP cookie comes from (and that would be
required for your setup to work) but obviously that weakens security.

I'm not aware of a feature to configure a single IP address (or even
localhost) as a "whitelisted" IP address from which all requests are
allowed, without turning off address checking completely and
unconditionally.

-peter