Logout with new shibboleth sp

[Justin Russo]

Hi Peter thank you so much for your prompt response.
I read the article and i contacted my idp and got the logout url. 
https://myidp.org/siteminderagent/smlogout.asp?AppReturnUrl=https://mysite.com/mysite/.


so when i click the logout i go to my idp apge where it states that you have successfully logged out and a  label appears with the option "click here to navigate back to the site",
Once i click this this takes me to my url - https://mysite.com/mysite/ i mentioned in the "return", but the problem is it goes directly and doesnt ask me to re-authenticate.
i directly go to my app without authenticating.


________________________________
 From: Peter Schober <peter.schober at univie.ac.at>
To: users at shibboleth.net 
Sent: Friday, July 5, 2013 11:45 AM
Subject: Re: Logout with new shibboleth sp
 

* Justin Russo <justin9 at ymail.com> [2013-07-05 17:20]:
> for the logout part, i have a button on my page which on click event
> is linked to the url - https://mydomain.com/Shibboleth.sso/Logout.

You're aware of the many problems with logout?
https://wiki.shibboleth.net/confluence/display/SHIB2/SLOIssues

What SAML IdP are you using?

> 1. after the default logout page seen, when i hit back button on my
> browser i can still see the pages of a logged in user, how can i
> prevent this.

Unless your IdP implements SLO that's almost immaterial since as long
as your HTTP User Agent has a valid session at the IdP ("SSO") you'll
be logged in to any SP immediately anyway.

> 2. i know that when i click logout
> (https://mydomain.com/Shibboleth.sso/Logout), i go to the deafult
> shib logout page, i also have a custom logout page, can i redirect
> it to my custom logout page but at the backend make sure everything
> works fine. How can i achieve this.

Look for "return" on the page
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator
/Shibboleth.sso/Logout?return=<urlencoded-resource>

-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130705/ec1d6511/attachment.html