Noob question

Peter Schober peter.schober at univie.ac.at
Tue Mar 22 09:12:16 UTC 2022


* Matthews, Lee (NIH/NIDDK) [E] via users <users at shibboleth.net> [2022-03-21 22:27]:
> If I authenticate to one application and open a new browser tab and
> go to the second application I can bypass the entire authentication
> mechanism.
> Is this because the IDP recognizes me from the authentication to the first application?

You don't mention what happens when you access the second application
first in a new private browsing window. From the above it could also
be that the second application is misconfiigured and doesn't actually
require authentication.

-peter


More information about the users mailing list