Cookie destruction

[Mark O'Quinn]

Hi All,

I've configured Shibboleth idp using external authentication (forceAuth =
"true" and isPassive = "false") with google Apps and I've modified the
idp.war to include some extra code (to catch the logout process with a
personalized filter).

When I logout from Google I'm redirected to the idp, here I delete all the
cookies (by using the filter I created). Now, I don't close the browser and
instead I go to gmail and try to login and I'm redirected to the idp to
authenticate again (which is something I want to accomplish) my question
is, can I rely on this and not tell the user to close the browser?

I have tested in several browsers and I have always had to reauthenticate
without closing the browser.

Thank you for all your help.

Cheers.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120809/24f134bf/attachment.html