Long Query String in Address Bar of Browser When User Returned from Passport Login Server (299644)
The information in this article applies to:
- Microsoft Passport 1.3
- Microsoft Passport 1.4
This article was previously published under Q299644 SYMPTOMS
When a user is returned to your site from the Passport Login server, a long query string may be appended to the address bar of the browser.
CAUSE
The extra query string parameters may be the encoded Passport Ticket and Profile information as sent by the Passport Login server for the user.
RESOLUTION
As soon as Ticket (the t parameter on the query string) and Profile (the p parameter on the query string) are received, the Passport Manager object writes cookies using these values and you can clear the query string by redirecting the page to itself minus most of the query string. NOTE: You may have your own custom parameters in the query string; if so, you must isolate and re-add these parameters.
For more information on how to detect whether the query string contains Passport-relevant information, and for sample script for cleaning up the query string, see the following Microsoft Passport Software Development Kit (SDK) Web site:
It is strongly recommended that Passport participant sites clean up the query string in this way to improve both user experience and security.
| Modification Type: | Major | Last Reviewed: | 9/30/2003 |
|---|
| Keywords: | kbprb KB299644 |
|---|
|