Logout with new shibboleth sp

[Peter Schober]

* Justin Russo <justin9 at ymail.com> [2013-07-05 17:20]:
> for the logout part, i have a button on my page which on click event
> is linked to the url - https://mydomain.com/Shibboleth.sso/Logout.

You're aware of the many problems with logout?
https://wiki.shibboleth.net/confluence/display/SHIB2/SLOIssues

What SAML IdP are you using?

> 1. after the default logout page seen, when i hit back button on my
> browser i can still see the pages of a logged in user, how can i
> prevent this.

Unless your IdP implements SLO that's almost immaterial since as long
as your HTTP User Agent has a valid session at the IdP ("SSO") you'll
be logged in to any SP immediately anyway.

> 2. i know that when i click logout
> (https://mydomain.com/Shibboleth.sso/Logout), i go to the deafult
> shib logout page, i also have a custom logout page, can i redirect
> it to my custom logout page but at the backend make sure everything
> works fine. How can i achieve this.

Look for "return" on the page
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator
/Shibboleth.sso/Logout?return=<urlencoded-resource>

-peter