This object is in archive! 

SSO: Internet Explorer not allowing cookie?

Archived Chris Reppy 11 years ago

I have successfully implemented SSO from my app to UseResponse. It works great when I run my app in Chrome. (And maybe other browsers, haven't tested thoroughly). But it does not work in IE. It appears that the 'sso_user' cookie is not being set. I am guessing it's some IE security setting, but I haven't been able to figure out which.


I found this article, which talks about a P3P policy (among other things). Is there anything here that I need to do to make this work in IE?

http://msdn.microsoft.com/en-us/library/ms537343%28VS.85%29.aspx


Thanks

Best Answer
photo

In IE, you need to set security settings to Medium, as if it's High Security Profile, cookies from other domains won't be set in browser, except the domain where it was created.

So check your browser security settings in IE

Replies (5)

photo
1

In IE, you need to set security settings to Medium, as if it's High Security Profile, cookies from other domains won't be set in browser, except the domain where it was created.

So check your browser security settings in IE

photo
1

Do you know exactly which setting controls this? If I go to the Security tab and choose Custom, I get a long list of settings to Enable/Disable/Prompt. I didn't see one that clearly matched this situation.

photo
1

Chris,

Try to set Security Settings to low and check if it works and only then it's reasonable to identify the problem. Let me know if it worked for you

photo
1

It works if I make the UR site a trusted site (and thus set its security settings to 'Low'). Setting my own app to run in the trusted zone does not help.


It will not be practical to ask all of my community members to add our UR site to their trusted sites.


Is there another way?

photo
2

I was able to get it to work by implementing P3P. The best resource I found for this is https://p3pedit.com/. You can use their policy-creation wizard for free, but if you want to download the resulting policy files, it is $59.


If anyone else encounters this and would like help, feel free to contact me:


jason -at- marathondata -dot- com

Replies have been locked on this page!