Can the _shibboleth_ credentials be transferred?

[Daniel Södling]

That  sounds like it would work and also sounds like it is line with what Peter tried to tell me (without me getting it, sorry about that).
I will give it a try.

Thanks a bunch!
Daniel 






> On 16 Oct 2018, at 09:48, Jarno Huuskonen <jarno.huuskonen at uef.fi> wrote:
> 
> Hello,
> 
> On Tue, Oct 16, Daniel Södling wrote:
>> Just to clarify, are you saying that the cookie that holds the credentials is is no way tied to the machine/address for which it was issued? So I should be able to take the credentials from one users machine and use it in a request form another machine to gain access to my resource? Granted that is exactly what I would like to do, I just find it surprising that it would work that way. 
> 
> Does changing consistentAddress or checkAddress to false help ?
> (https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions)
> 
> -Jarno
> 
> -- 
> Jarno Huuskonen
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181017/bae31403/attachment.html>