Noob question

[Wessel, Keith]

Lee,

It's because the IdP recognizes you. More specifically, you have an IdP session already and thus don't need to reauthenticate. That's why it's called _SINGLE_ sign-on.

Keith


From: users <users-bounces at shibboleth.net> On Behalf Of Matthews, Lee (NIH/NIDDK) [E] via users
Sent: Monday, March 21, 2022 4:27 PM
To: Shib Users <users at shibboleth.net>
Cc: Matthews, Lee (NIH/NIDDK) [E] <lee.matthews at nih.gov>
Subject: Noob question

I have two applications that are using and IDP that I do not manage.
These are dev/testing versions of the same application.
If I authenticate to one application and open a new browser tab and go to the second application I can bypass the entire authentication mechanism.
Is this because the IDP recognizes me from the authentication to the first application?

Thanks in advance,

Lee


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220321/7a77cfce/attachment.htm>