Question related to "Local Logout" provided by Shibboleth IdP 2.4.0

[Yaowen Tu]

Actually I am using non-transient NameID.Does it make any difference during
single logout compared with transient NameID?

Yaowen

Yaowen


On Thu, Aug 29, 2013 at 3:22 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 8/29/13 6:05 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote:
>
> >Another think I want to confirm is that in current IdP there is no way to
> >do both of:
> >
> >1) Local Logout which IdP locates an active session based on the client's
> >cookie and terminates it.
> >
> >2) Redirect back to SP.
> >
> >Is that right? If IdP do #2, it has to be a simplified version of single
> >logout. If #1, IdP will go to logout.jsp.
>
> That's technically true, but #2 almost always involves a session that will
> correspond to the cookie anyway unless you're using non-transient NameIDs.
> The problems with the session cache don't arise that much otherwise, I
> don't think.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130829/ca5ddbbf/attachment-0001.html