<div dir="ltr"><span style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px">Hello,</span><div style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px"><br></div><div style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px">
I was hoping this might be a good place to get some clarification on what's possible... I've got some internal tools spread out across at least two servers on different subdomains of a common top level. Let's call them <a href="http://foo.domain.com/" target="_blank">foo.domain.com</a>, <a href="http://bar.domain.com/" target="_blank">bar.domain.com</a>, <a href="http://fuzz.domain.com/" target="_blank">fuzz.domain.com</a> . One server is IIS and the other apache2 on linux(Ubuntu 12.04). The idP will be ADFS supporting SAML2. My question is whether I can have these logically as a single "application", and also be able to navigate between sites seamlessly after a single authentication. I'm looking to use passive on the IIS site and active on the others... Is this possible? Reading the documentation I'm a bit unclear as to what would happen if the user crossed domains. Can the authentication information in the cookie be validated with the idP seamlessly if the "session" isn't in the SP's cache?</div>
<div style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px"><br></div><div style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px">Thanks,</div><div style="color:rgb(0,0,0);font-family:arial,sans-serif;font-size:13px">
-Greg</div></div>