Cookie destruction

[Mark O'Quinn]

Hi Chad,

I know that next question is not related to the idp but, have you (or anybody) known any case where by any chance, clicking on the logout button on the SP (Google Apps) the session has not been invalidated? I asked this because I'm worry that the single logout at the end won't work because of SP fault (Google Apps)

Hi Dhivakaran, I based my code from here: http://shibboleth.1660669.n2.nabble.com/Forwarding-authentication-request-error-404-ExternalAuth-SOLVED-td7310618.html#a7316204 

Thxs

Cheers.

On Aug 9, 2012, at 7:50 PM, Chad La Joie <lajoie at itumi.biz> wrote:

> That's up the SP.  The IdP has no ability to destroy the SP's session.
> 
> On Thu, Aug 9, 2012 at 8:48 PM, Mark O'Quinn <mark1oquinn at gmail.com> wrote:
>> Hi Chad,
>> 
>> Thank for the quick response.
>> 
>> Yes, I'm asking that, and specially related to the single logout. I don't want to show to the user about closing the browser but to be sure no session is kept with the service provider. is that correct?
>> 
>> Thanks again
>> 
>> Cheers.
>> 
>> 
>> On Aug 9, 2012, at 7:42 PM, Chad La Joie <lajoie at itumi.biz> wrote:
>> 
>>> I'm not 100% sure what you're asking.  I think you're asking "if I
>>> clear all the cookies, can I be sure the IdP won't find some existing
>>> session for the user?".  If that's the case, then yes, you can be sure
>>> of that.  No cookie, no session.
>>> 
>>> On Thu, Aug 9, 2012 at 8:24 PM, Mark O'Quinn <mark1oquinn at gmail.com> wrote:
>>>> Hi All,
>>>> 
>>>> I've configured Shibboleth idp using external authentication (forceAuth =
>>>> "true" and isPassive = "false") with google Apps and I've modified the
>>>> idp.war to include some extra code (to catch the logout process with a
>>>> personalized filter).
>>>> 
>>>> When I logout from Google I'm redirected to the idp, here I delete all the
>>>> cookies (by using the filter I created). Now, I don't close the browser and
>>>> instead I go to gmail and try to login and I'm redirected to the idp to
>>>> authenticate again (which is something I want to accomplish) my question is,
>>>> can I rely on this and not tell the user to close the browser?
>>>> 
>>>> I have tested in several browsers and I have always had to reauthenticate
>>>> without closing the browser.
>>>> 
>>>> Thank you for all your help.
>>>> 
>>>> Cheers.
>>>> 
>>>> --
>>>> To unsubscribe from this list send an email to
>>>> dev-unsubscribe at shibboleth.net
>>> 
>>> 
>>> 
>>> --
>>> Chad La Joie
>>> www.itumi.biz
>>> trusted identities, delivered
>>> --
>>> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
>> 
>> --
>> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
> 
> 
> 
> -- 
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20120809/dffda0c2/attachment-0001.html