Considering Assumptions, Dependencies, and Constraints

Assumptions and Dependencies

• All the components in the deployment have the same GMT time stamp.

• CDSSO must be enabled before configuring Cookie Hijacking Prevention.

• The Cookie Hijacking Prevention configuration doesn't prevent cookies being viewed or hijacked by hackers using network snooping applications. The only way to prevent this is by using a secure communication protocol such as SSL.

• All the agents in the deployment have a unique agent profile in the OpenSSO Enterprise server.

Constraints

• CDSSO and Cookie Hijacking Prevention can be used only if OpenSSO Enterprise and policy agents are involved.

• Policy agents must be configured to use the same OpenSSO Enterprise infrastructure where multiple OpenSSO Enterprise instances can exist.

• Multiple OpenSSO Enterprise instances configured for high-availability must all reside in a single DNS domain. Only policy agents can reside in different DNS domains.