-
Suggestion
-
Resolution: Fixed
-
None
-
None
Add an error message saying that '*' is not supported in the SSO Domain Pattern. Currently, the examples provided are not enough to prevent patterns like *.example.com
- is superseded by
-
CWD-1945 Make Crowd's cookie domain validation consistent with RFC 6265
- Closed
One more detail:
We should remove any dots from the end of the string as well.
For example: .domain.com. (with the dot at the end) is supported by FF but not by IE and Chrome.