Forcing logout with NativeSP

Cantor, Scott cantor.2 at osu.edu
Fri Sep 30 19:23:58 BST 2011


On 9/30/11 2:16 PM, "Stephen Chan" <sychan at lbl.gov> wrote:

>   Okay - something to consider may be an attribute like
>"Shib-sessionCookies" that enumerates the cookie names, so that apps
>can clear them out "surgically". On the face of it, it seems easy to
>implement.

Yes, it would be. You can suggest anything you like in Jira. I don't track
or remember requests sent to the list.

I think you're vastly overstating the frequence of cases in which the
standard redirect flow is a problem, though. This has literally never been
an issue. Even Confluence can handle it.

-- Scott



More information about the users mailing list