shibboleth-dev - Shib HS doing its own SSO?

Subject: Shibboleth Developers

List archive

Shib HS doing its own SSO?

From: "RL 'Bob' Morgan" <>
To: Scott Cantor <>
Cc: Shibboleth Design Team <>
Subject: Shib HS doing its own SSO?
Date: Thu, 19 Sep 2002 16:01:06 -0700 (PDT)

Scott:

I was looking back over your Shib-as-WebISO pitch at Adv CAMP and came
across this line:

Handle Service expected for Beta-1 should provide cookie-based SSO
across a replicated array of login sites, but still assumes
authentication is already done

This puzzles me. I guess I can understand why some kinds of local signon
might benefit from having Shib do this, but it makes me nervous to think
that the SHS would be introducing yet another cookie-based session,
distinct from the local SSO login session and any target-site session(s).
Can you say what you meant by this?

- RL "Bob"

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at

http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--

Shib HS doing its own SSO?, RL 'Bob' Morgan, 09/19/2002
- RE: Shib HS doing its own SSO?, Scott Cantor, 09/20/2002

List archive

Shib HS doing its own SSO?