Consent

.NET Passport Cookies

Using the Passport Manager object, Microsoft® .NET Passport reads and writes cookies that are used to persist authentication and profile information on the user's computer in order to provide the user with the experience of an authentication session.

Domain-Authority Cookies

The following five cookies are written to the .passport.com domain. None of these cookies can be accessed directly by a participating site.

Participating Site Cookies

The following two cookies are written to the domain and path to which the participating site's Passport Manager object is configured. By default, cookies are written to the participating site's root domain. Subdomains can be used, by entering values in the Cookie Domain and Cookie Path text boxes of the Passport Manager Administration utility. The participating site is responsible for deleting all cookies, including those in subdomains. For more information, see Implementing Sign-Out and Deleting Cookies.

Common Name

Label

Description and Contents

Consent

MSPConsent

Encrypted with .NET Passport key. Contains the users consent status. This cookie is set in the domain and path specified in the Consent Cookie Domain and Consent Cookie Path fields in the Passport Manager Administration utility.

Profile

MSPProf

Encrypted with .NET Passport key. Contains each of the core profile attributes.

Secure

MSPSecAuth

Encrypted with .NET Passport key. Set when the SSL sign-in feature is enabled. Contains a token that allows Passport Manager to help verify that the SSL sign-in process was invoked.

Ticket

MSPAuth

Encrypted with .NET Passport key. Contains the .NET Passport timestamps (last refresh and last manual sign-in), saved-password flag, key version verification, and any flags set by network servers.

See Also

Passport Manager Administration Utility | Core Profile Schema