Thesis about SLO (was: How to avoid failure of SLO)

[Chad La Joie]

I don't think there has been but I have talked with 5-6 institutions
that have deployed the NIIF SLO plugin for the IdP and they've all
reported that things failed just as our write up said they would.

Let me be clear about this though, us stating that there is a problem
with the way that SLO works is *not* us stating that session
termination shouldn't be done.  We're just saying that the way it's
defined in the SAML spec and implemented in applications is busted
and, short of back channel support in application, we don't know of a
way that actually could work.

On Wed, May 9, 2012 at 5:01 AM, Peter Schober
<peter.schober at univie.ac.at> wrote:
> The canonical treatment in this community at least is
> https://wiki.shibboleth.net/confluence/display/SHIB2/SLOIssues
>
> I don't know whether there have been published any articles with
> formal studies of this topic in peer-reviewed/scientific journals.


-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered