Integrating CAS into logout/SLO

Cantor, Scott cantor.2 at osu.edu
Wed Jun 17 14:47:15 EDT 2015


On 6/17/15, 2:32 PM, "dev on behalf of Marvin Addison" <dev-bounces at shibboleth.net on behalf of marvin.addison at gmail.com> wrote:

>Forgot to ask, is there a way to do both in a single request? I would think there could be a configuration property to allow deployers to toggle between one of two modes:
>
>1. A request to /Logout automatically signals /PropagateLogout at the end.
>2. Provide a "Propagate Logout" button/link on the logout.vm page that signals the propagate flow at the user's discretion.

Since we haven't built the view(s) that will actually broker that relationship yet, we certainly can do what we like/want. That's another reason I wanted it to be handled separately from the mechanics of "propagate SAML logout to SP", which is a messaging and error handling process, ideally not a UI one. And that's even more the case with SOAP logout, since by definition there's no UI there.

-- Scott



More information about the dev mailing list