Terminating the IdP Session in an Login Extension

[Joshua Brodie]

Hi All:

Scott suggested that I post question here on the dev mail list.

I am creating a login extension, whereby after authentication, it
checks if password was not set in last 120 days, and if not, the user
sees an info page and can select to be redirected to another
application, to reset password (not SSO - re-authentication required
in other app as it is a non-Shib).

The sticking point:  when user is redirected to another application,
their session persists in the IdP - i.e. the user can hit the browser
back-button and pick-up where they left off in the IdP - I need to
prevent this; i.e. when user is redirected to other app, all IdP
session is killed and, if they hit the back-browser button, they will
get the standard error.jsp page -
would you be able to give pointers on how to achieve this?

Thanks.