← Prev in month ← Prev in thread

common domain cookie question

From
<>
Date
2010-07-08T15:53:36+00:00
ID
Thread
common domain cookie question
Can someone clarify how this cookie is used?

 

If an SP is supposed to use the last-appended IdP doesn't this mean a principle is effectively authenticated to only one IdP at a time? 

 

1. user logs into IdP #1

2. user can access SPs honoring authentication via IdP #1

3. user logs into IdP #2

4. user can access SPs honoring authentication via IdP #2

 

5. user requests an SP honoring authentication via IdP #1 

6. said SP retrieves the common domain cookie, extracts last entry (IdP #2) and redirects browser to IdP #2

7. IdP #2 cannot authenticate the user for an SP requiring authentication via IdP #1 

8. what happens?

 

Is this correct?
← Prev in month ← Prev in thread