Forcing logout with NativeSP

[Stephen Chan]

On Fri, Sep 30, 2011 at 11:23 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 9/30/11 2:16 PM, "Stephen Chan" <sychan at lbl.gov> wrote:
>
>>   Okay - something to consider may be an attribute like
>>"Shib-sessionCookies" that enumerates the cookie names, so that apps
>>can clear them out "surgically". On the face of it, it seems easy to
>>implement.
>
> Yes, it would be. You can suggest anything you like in Jira. I don't track
> or remember requests sent to the list.

   Okay, request submitted.

> I think you're vastly overstating the frequence of cases in which the
> standard redirect flow is a problem, though. This has literally never been
> an issue. Even Confluence can handle it.

   Well, I don't think I've made any claims of the frequency of this
beyond my own request :-)

   But I think that if these were available, they would be useful to
others as well.

   Thanks for the guidance on handling logout, hopefully my updates to
the Silverstripe Shibboleth module will make back into the
distribution and Silverstripe will get some more usage in the
Shib/SAML community.

   Steve