Luminate Online single sign-on methods that authenticate a user are POST only and must go through the secure URL, ensuring that passwords are kept confidential. In addition, proper use of our single sign-on establishes session cookies on both secure and insecure channels automatically, allowing constituents to travel back and forth between secure and non-secure content.