IDP logout.jsp

[Andrew Morgan]

On Sat, 12 Jan 2013, Cantor, Scott wrote:

> On 1/11/13 6:39 PM, "Andrew Morgan" <morgan at orst.edu> wrote:
>>
>> Maybe I'm doing something wrong...  I have commented out the
>> PreviousSession LoginHandler in handler.xml.  However, I am not being
>> redirected through CAS every time I access the IdP.
>
> That's up to CAS, not the IdP. I assume like any SSO agent, the CAS client
> maintains a session. It doesn't send you to CAS every time you access a
> server.
>
>> Is there some interaction with the CAS Client installed in the IdP that
>> is
>> keeping the session alive?
>
> I certainly imagine there would be.
>
>>  I see that my Jsession has a
>> _const_cas_assertion_ attribute set, which makes me think that the CAS
>> Client itself is telling the container that I'm still authenticated.
>
> You're using the REMOTE_USER handler, so it's up to your configured
> authentication code to decide how to get REMOTE_USER set. Nothing to do
> with the IdP in any way. If you want CAS to behave a particular way on
> that end, that would be between you and CAS.

Okay, good to know where the issue originates.  I'll take this over to the 
CAS mailing list!

Thanks,
 	Andy