Agent Guides › Web Agent Guide › Single Sign-On (SSO) › Specify the Cookie Path for Agent Cookies

Specify the Cookie Path for Agent Cookies

When a Web Agent creates a cookie, the web agent automatically uses the root (/) directory as the cookie path. The domain and path attributes of cookies are compared to the URL of a request. If the cookie is valid for the domain and the path, the client sends the cookie to the server. When the cookie path uses the root value, the client sends the cookie to the server with all requests in the domain.

You can set SiteMinder cookies to a given set of paths to eliminate the web traffic caused when cookies are sent for unprotected resources. For example, if a cookie path is set to /mypackage, the client only sends the cookie for requests in a particular package in the domain.

To specify the cookie path for agent cookies

1. Open your Agent Configuration Object or your local agent configuration file.
2. Set the Cookie Path for the Cookie Provider in the following parameter:

   MasterCookiePath

   Specifies the path for the primary-domain session cookies created by the cookie provider. For example, if this parameter is set to /siteminderagent, all session cookies that the cookie provider creates will have the /siteminderagent path. If this parameter is not set in the Cookie Provider Agent, the default value is used.

   Default: / (root)

3. Set the cookie path for the secondary agents in the following parameter:

   CookiePath

   Specifies the cookie path for the following secondary agent browser cookies:

   • xxSESSION
   • xxIDENTITY
   • xxDOMINODATA
   • xxCHALLENGE (including SSL_CHALLENGE_DONE)
   • xxDATA
   • xxSAVEDSESSION

   For example, setting this parameter to /BasicAuth, all of the secondary agents in the previous list are created using /BasicAuth as the path. If not specified, the default value is used.

   The CookiePath is not added to credential cookies (such as xxxxCRED) to maintain backwards compatibility with 4.x agents.

   The following cookies will always use the root (/) path:

   • ONDENIEDREDIR
   • TRYNO

   If the CookiePathScope parameter is greater than zero, the CookiePath parameter settings are overriden.

   Default: / (root)

4. (Optional) If you want the Web Agent to extract the cookie path from the URL instead of using the CookiePath value, set the following parameter to a number greater than zero:

   CookiePathScope

   Specifies the scope of the cookie path for the following secondary agent cookies:

   • xxSESSION
   • xxIDENTITY
   • xxDOMINODATA
   • xxCHALLENGE (including SSL_CHALLENGE_DONE)
   • xxDATA
   • xxSAVEDSESSION

   Using a CookiePathScope greater than zero in this parameter overrides the setting of the CookiePath parameter.

   Default: 0

More information:

Configure Full Logoff