Skip to main content
2 of 2
replaced http://stackoverflow.com/ with https://stackoverflow.com/

After doing lot of search I came out with next results:

  1. Sharepoint stores a reference to the SessionSecurityToken instead of the token self like any other Standard WIF implementation does. For this reason no other WIF application would be able to read the content of the sharepoint Fedauth cookie.

  2. Sharing Cookies between applications is seen as unsecrue and bad practice as men should share the same machinekey for both applications to make them able to read fedauth cookies.

  3. In similair scenario the following alternatives are considered more suitable: . Implementing identity delegation based upon the actas token provied by ADFS: Check this link about identity deleagtion . Other options are like using poorman delegation can be found in the following answer