Shibboleth Developers

["RL 'Bob' Morgan" <>]

On Mon, 5 Jan 2004, Scott Cantor wrote:

> I wonder if that would be workable with the SAML profiles or not. Might
> be worth a look.

Well, the current profiles don't specify how the browser gets from the
target to the "inter-site transfer service", so seems like it would, or
could.

> How does that work? A shared domain cookie? What happens if the target
> doesn't share a domain with the weblogin server?

Then you use Shib 8^).  This is probably pubcookie's biggest weakness;
there is discussion about whether to fix it or not.

 - RL "Bob"