[tf-emc2] Re: [refeds] SAML Logout -- giving users options .....

[Manuel Haim]

Hi Steven,

> c) Ask the user whether or not they want to destroy the IDP session.
>
> So -- does anyone have a page that implements option c) that they are
> willing to share ?

I think we did what you are looking for. We have written a plugin for
the IdP which adds a logout page below the IdP's url. That page shows a
logout button as well as a list of service providers which have been
sent authentications during the IdP session. Find the plugin and source at:

http://www.staff.uni-marburg.de/~haimm/unimr-logout.shib2.2012_04_27.zip

The logout page will be located below your IdP's url, e.g.
https://idp.example.com/idp/logout

Clicking the logout button will delete the IdP's session cookie and
destroy the related IdP session.

Hope this helps,
Manuel