SAML Decoder Question w.r.t IdP

[Joshua Brodie]

Hi Scott:

Thanks - I was barking up the wrong tree.

I am creating a login extension, whereby after authentication, it
checks if password was not set in last 120 days, and if not, the user
sees an info page and can select to be redirected to another
application, to reset password (not SSO - re-authentication required
in other app as it is a non-Shib).

The sticking point:  when user is redirected to another application,
their session persists in the IdP - i.e. the user can hit the browser
back-button and pick-up where they left off in the IdP - I need to
prevent this; i.e. when user is redirected to other app, all IdP
session is killed and they will get the standard error.jsp page -
would you be able to give pointers on how to achieve this?

Thanks.

On 26 June 2012 17:48, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 6/26/12 6:17 PM, "Joshua Brodie" <josbrodie at gmail.com> wrote:
>>
>>Question:
>>
>>- After request submitted by an SP, which IdP cookie stores the SAML
>>request send from the SP?
>
> None. It's accessed via a login context and the cookie (undocumented
> AFAIK) is a key to it in memory. You can access the context, and you can
> respond by returning control to the authentication engine in defined ways,
> and that's all.
>
>>What can I do to clear the above IdP's record of the SAML request -
>
> You don't do anything but the above from within a login handler.
>
> Send any follow up questions to the dev list, please.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net