Forum Discussion

Terry_77423's avatar
Terry_77423
Icon for Altostratus rankAltostratus
Oct 27, 2016

Domain Cookie and Logout

Can anyone confirm what I am experiencing.

 

I have set "Domain Cookie" to contesa.com, and I can successfully use the same authentication across multiple subdomains and vips as expected. However All functions that logout appear to ignore this setting. So the cookie still exists, and is never deleted.

 

Looking at the http traffic all functions that attempt to delete the cookies do not specify the domain, and therefore the cookie is not deleted.

 

I am wondering if this is a bug, by design, or some other configuration that I am missing.

 

BIG-IP Access Policy Manager (APM)
security

3 Replies

Sort By
  • Terrence's avatar
    Terrence
    Icon for Nimbostratus rankNimbostratus
    Oct 27, 2016

    I am not sure what that means?

     

    This is all I have changed in the access policy, and for authentication it is working as expected, however all functions which are meant to remove this session cookie fail, as they never specify the domain.

     

    Terry

     

  • Terrence's avatar
    Terrence
    Icon for Nimbostratus rankNimbostratus
    Oct 28, 2016

    In the end I changed to multidomain sso instead, and it satisies my needs in a much better manner.