Closed carlylemiii closed 9 months ago
Hi! Can you provide some evidence, even a sentence, that these websites are sharing credentials?
Hey, Ricky! If you go directly to simplifimoney.com, it actually redirects to quicken.com. But then if you choose to sign in to Simplifi Money from there, you're directed to app.simplifimoney.com. But then there, the login field is in an iframe with quicken.com as the domain.
As always, thanks @carlylemiii!
Overall Checklist
for password-rules.json
for change-password-URLs.json
https://example.com/.well-known/change-password
)for shared-credentials.json
shared
, the new group serves login pages on each of the included domains, and those login pages accept accounts from the others. (For example, we wouldn't use ashared
association fromgoogle.co.il
togoogle.com
, becausegoogle.co.il
redirects toaccounts.google.com
for sign in.)from
andto
, the new group, thefrom
domain(s) redirect to theto
domain to log in.for shared-credentials-historical.json