Question related to "Local Logout" provided by Shibboleth IdP 2.4.0

[Cantor, Scott]

On 8/29/13 6:05 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote:

>Another think I want to confirm is that in current IdP there is no way to
>do both of:
>
>1) Local Logout which IdP locates an active session based on the client's
>cookie and terminates it.
>
>2) Redirect back to SP.
>
>Is that right? If IdP do #2, it has to be a simplified version of single
>logout. If #1, IdP will go to logout.jsp.

That's technically true, but #2 almost always involves a session that will
correspond to the cookie anyway unless you're using non-transient NameIDs.
The problems with the session cache don't arise that much otherwise, I
don't think.

-- Scott