Re: Tomcat 9.0.62: Setting STRICT_SERVLET_COMPLIANCE to true breaks Tomcat Single Sign On

Mark, Thanks for the comments. Yes, LegacCookieProcessor gets invoked in my case, not the default Rfc6265CookieProcessor as documented at Tomcat 9 Cookie Processor Component ( https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html). I enabled debugging for a few components: - "org

Re: Tomcat 9.0.62: Setting STRICT_SERVLET_COMPLIANCE to true breaks Tomcat Single Sign On

Hi, It looks like the documentation needs a further update. STRICT_SERVLET_COMPLIANCE also affects the CookieProcessor instances. Specifically, look at the forwardSlashIsSeparator attribute of the LegacyCookieProcessor. https://tomcat.apache.org/tomcat-9.0-doc/config/cookie-processor.html T

Tomcat 9.0.62: Setting STRICT_SERVLET_COMPLIANCE to true breaks Tomcat Single Sign On

--- Description --- I have a web app that is a collection of a few web apps, with a structure like: - apache-tomcat - myWebSite - webapps - web app #1 (login) - web app #2 - ... ... - web app #X I use Tomcat SingleSignOn valve for moving around the we