[JIRA] Created: (SSPCPP-402) Support front-channel SLO without cookies

Fri Nov 4 11:07:25 GMT 2011

Support front-channel SLO without cookies
-----------------------------------------

                 Key: SSPCPP-402
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-402
             Project: Shibboleth SP - C++
          Issue Type: Improvement
          Components: SAML 2.0 Logout
            Reporter: Kristof Bajnok
            Assignee: Scott Cantor

If the SP could terminate the session based on NameID only, then front-channel Single Logout UI implementation wouldn't require acceptance of third party cookies. The request can be authenticated based on the signature, which is also mandated by the profile.

On the other hand, I admit that front-channel application notification is quite useless without cookies, but I think it's more a deployment issue. (There are other ways to tie the app session to the Shibboleth session.)

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira