Shibboleth Developers

[André Cruz <>]

On Dec 22, 2008, at 2:59 PM, Scott Cantor wrote:

> > I tested it in
> > IE 7 (Medium Security), that has an IFRAME which loads another page  
> > from
> > the same server that contains the embedded WAYF. This will display  
> > the
> > right entry that only will be displayed if the cookie also is being  
> > sent
> > to the central WAYF that generates the .js file that is loaded.
> > I also tested this on another host in a different domain and this  
> > also
> > seems to work.
>
> If you mean Medium privacy, that level blocks third-party cookies  
> under a
> variety of circumstances. It's hard to see how you could get around  
> that if
> you're dealing with a second domain.

Distributing a P3P policy file got me around this issue of third-party  
cookies.

André