Noob question

[Matthews, Lee (NIH/NIDDK) [E]]

Thanks Keith

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Wessel, Keith via users <users at shibboleth.net>
Sent: Monday, March 21, 2022 5:32 PM
To: Shib Users <users at shibboleth.net>
Cc: Wessel, Keith <kwessel at illinois.edu>
Subject: [EXTERNAL] RE: Noob question


CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and are confident the content is safe.


Lee,



It’s because the IdP recognizes you. More specifically, you have an IdP session already and thus don’t need to reauthenticate. That’s why it’s called _SINGLE_ sign-on.



Keith





From: users <users-bounces at shibboleth.net> On Behalf Of Matthews, Lee (NIH/NIDDK) [E] via users
Sent: Monday, March 21, 2022 4:27 PM
To: Shib Users <users at shibboleth.net>
Cc: Matthews, Lee (NIH/NIDDK) [E] <lee.matthews at nih.gov>
Subject: Noob question



I have two applications that are using and IDP that I do not manage.

These are dev/testing versions of the same application.

If I authenticate to one application and open a new browser tab and go to the second application I can bypass the entire authentication mechanism.

Is this because the IDP recognizes me from the authentication to the first application?



Thanks in advance,



Lee




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220321/f236fc05/attachment.htm>