<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Thanks Keith<br>
</div>
<div id="appendonsend"></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size: 11pt;" face="Calibri, sans-serif" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Wessel, Keith via users <users@shibboleth.net><br>
<b>Sent:</b> Monday, March 21, 2022 5:32 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Wessel, Keith <kwessel@illinois.edu><br>
<b>Subject:</b> [EXTERNAL] RE: Noob question</font>
<div> </div>
</div>
<div style="word-wrap:break-word" lang="EN-US">
<p></p>
<div style="background-color: rgb(255, 235, 156); width: 100%; border-style: solid; border-color: rgb(156, 101, 0); border-width: 1pt; padding: 2pt; font-size: 10pt; line-height: 12pt; font-family: Calibri; color: black; text-align: left;">
<span style="color: rgb(156, 101, 0);">CAUTION:</span> This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and are confident the content is safe.</div>
<br>
<p></p>
<div>
<div class="x_WordSection1">
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
Lee,</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
It’s because the IdP recognizes you. More specifically, you have an IdP session already and thus don’t need to reauthenticate. That’s why it’s called _<i>SINGLE</i>_ sign-on.</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
Keith</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
<b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of </b>Matthews, Lee (NIH/NIDDK) [E] via users<br>
<b>Sent:</b> Monday, March 21, 2022 4:27 PM<br>
<b>To:</b> Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Matthews, Lee (NIH/NIDDK) [E] <lee.matthews@nih.gov><br>
<b>Subject:</b> Noob question</p>
</div>
</div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
</p>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;">I have two applications that are using and IDP that I do not manage.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;">These are dev/testing versions of the same application.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;">If I authenticate to one application and open a new browser tab and go to the second application I can bypass the entire authentication mechanism.</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;">Is this because the IDP recognizes me from the authentication to the first application?</span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;">Thanks in advance, </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif; background: white none repeat scroll 0% 0%;">
<span style="font-size: 12pt; color: black;">Lee</span></p>
</div>
<div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size: 12pt; color: black;"> </span></p>
</div>
<div id="x_Signature">
<div>
<div>
<div>
<p class="x_MsoNormal" style="margin: 0in; font-size: 11pt; font-family: "Calibri", sans-serif;">
<span style="font-size:10.0pt"> </span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>