You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
I know I can apply crowd sso in the same domain.
I am wondering if the following is treated as the same domain. (Of course, this is the internal domain.)
best regards. Thanks
Hi @JongBum Lee
Yes, in that case all your applications belong to the same domain so Crowd SSO will work if you set swportal.domain.com as your SSO domain in Crowd's console.
Please note that foo.bar.swportal.domain.com would not be considered as belonging to the same domain (and thus Crowd SSO would not work). Quoting RFC 6265:
The user agent will reject cookies unless the Domain attribute specifies a scope for the cookie that would include the origin server. For example, the user agent will accept a cookie with a Domain attribute of "example.com" or of "foo.example.com" from foo.example.com, but the user agent will not accept a cookie with a Domain attribute of "bar.example.com" or of "baz.foo.example.com"