Using Persistent Cookie on AM/OpenSSO
Haven't used the feature of persistent cookie on AM/OpenSSO for a long time. Today when verifying a code change, I need to check the httponly flag of persistent cookie. Somehow I couldn't find this cookie on the browser. I did enable it in authentication core service though.
It turned out that one has to append the parameter "iPSPCookie=yes" to the Login URL. For instance, http://OpenSSO.or.AM.domain:port/amserver/UI/Login?iPSPCookie=yes. The persistent cookie name is set as the value of the com.iplanet.am.pcookie.name property. The default value is DProPCookie.
Hopefully I don't forget it again next time.
Posted at 10:44PM Aug 17, 2009 by gc in Sun | Comments[0]