Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Published by Scroll Versions from space IDS and version 8.2

...

Warning

WARNING: Consider carefully the security risks of persistent cookies.

Persistent Cookies

By default, SharePoint uses persistent cookies. The use of persistent cookies offers the richest and smoothest user experience at the expense of security. When persistent cookies are used, all Microsoft applications, including Internet Explorer and Office products, share the same authentication cookie. The result is that the user has to sign in only once. For example, if the user authenticates to SharePoint, an Office application will use the same cookie for authentication. Correspondingly, if the user signs out from SharePoint in Internet Explorer, the ongoing Office session is also terminated, resulting a warning "Connection lost to server".

...

Use of persistent cookies on shared desktop environments and for extranet users should be avoided.

Session Cookies

Session cookies hinder the user experience but provide additional security. In the case of session cookies, the user has to authenticate separately to each application that uses SharePoint. If the application is closed, the session within the specific application is terminated. Some features, for example Windows Explorer integration, does not work with session cookies.

A more specific evaluation of SharePoint 2013 session and persistent cookies is provided in the following Microsoft document: Implementing Persistent Cookies in SharePoint 2013 Products at http://www.microsoft.com/en-au/download/details.aspx?id=30447

Restrictions

Check browser compatibility against Microsoft SharePoint release notes.