Crowd documentation not compliant with RFC6265

Question

I've set up SSO according to the documentation with a top level domain (using domain.com for the example). However, this is not according to RFC6265 which Crowds tomcat appears to use internally. Giving me the following error:

2018-04-25 13:21:28,532 http-nio-8095-exec-6 ERROR [crowd.integration.springsecurity.AbstractCrowdSSOAuthenticationProcessingFilter] Unable to set Crowd SSO token
java.lang.IllegalArgumentException: An invalid domain [.domain.com] was specified for this cookie

Is there any documentation on how to resolve this?

Bruno Vincent · Answer

BTW if you can't login to remove the leading "." character from the SSO domain value through Crowd's console, you can reset it directly in the database: https://confluence.atlassian.com/crowd/resetting-the-domain-cookie-value-97911346.html

Bruno Vincent · Answer

You're right. I should have been more specific. Overriding the cookie.domain property in the crowd.properties file is actually an option for applications connecting to Crowd (including Crowd itself if version is < 3.0).

SMillerNL · Answer

Also, I'm using crowd 3.2 so the properties file won't help me unfortunately.