IDP and High Availability clarifications.

[Byte Flinger]

On 10 August 2013 20:41, Cantor, Scott <cantor.2 at osu.edu> wrote:

> If you don't need any kind of real logout, I strongly urge you to consider
> that, it works extremely well.
>

I guess you mean the fact that because we do not keep track of user cookies
we can't really do anything about log out however the SP should still be
able to show a "log out"  link which simply expires the cookie at the user
browser, no?

It replaces that cookie (or can make it superfluous) but it doesn't
> replace the login context cookie.
>

Yeah thats what I thought though your answer is kind of conflicting with
Nate's answer.

Thanks for the comments on Terracotta, kind of sucks that it has gone the
way it has. I'll have to evaluate what's the best option to go with.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130811/8e85dddb/attachment.html