How the Third Party WAM Passes the User Identity

The third-party WAM system can use one of two methods to pass a federated user identity to Federation Manager:

Using a legacy cookie or open format cookie.
The open format cookie can be encrypted to ensure the security of the data.
Using a query string appended to a redirect URL that sends the browser to Federation Manager.
The query string is sent in clear text.

The method a third-party WAM system chooses depends on the configuration it wants to establish for passing a user identity to Federation Manager.

The methods of passing the user identity are detailed in the following sections.