Create the CDSSO HTML link

The HTML link (located on the original WebSEAL server) that connects the user to a resource on the destination WebSEAL server must use a special CDSSO expression that directs the request to a CDSSO management page pkmscdsso:

/pkmscdsso?destination-URL

For example:

http://websealA/pkmscdsso?https://websealB/resource.html

The pkmscdsso management page is a management command to the WebSEAL server. It is not represented in the object space and we cannot attach policies to it.

The token create module creates and encodes an authentication token (containing the user's identity information) and includes this token in a redirect response to the resource using the destination URL information from the CDSSO link. For example:

http://websealB/resource.html?PD-ID=encoded-authn-token&PD-REFERER=websealA

Parent topic: Configuration of cross-domain single signon