Single log out across all service providers

[Brian Reindel]

Maybe I'm just not understanding how the single log out should work,
but I am following the flow here:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPEnableSLO

* Shibboleth is only killing the session for the SP that hit
/Shibboleth.sso/Logout (as indicated in the verbiage of the logout.jsp
on the IdP), but it does not kill the session on the other SPs.

* Although the session is gone, I can still hit the application, and I
am not being redirected to my configured login handler as if there
were no session.

I get that my applications may have their own session management that
I need to deal with in some way, but my desired functionality is to
have an SP initiate a logout, and it kills the Shibboleth session for
that user on all SPs. If I then try and hit any SP I have to log back
in.

It might also help if someone could explain this statement on the
default logout.jsp:

"If your Identity Provider deployment relies on the built-in Session
mechanism for SSO, the following is a list of Service Provider
identifiers tracked by the session that has been terminated:"

Is that just stating the obvious that if the session management was
customized then the logout might not work as intended? If so, then I
don't need to worry about that.

If it helps to know I am using the Apache module.