Invalidate SP session

[Cantor, Scott]

On 7/10/13 10:04 AM, "Stein, Eric" <steine at locustec.com> wrote:

>Is it possible to invalidate the SP session while not interfering with
>the IdP session, or are they inextricably tied?

It's more that it's hard to do both. /Shibboleth.sso/Logout will only
affect the SP unless the IdP has SAML logout support exposed in its
metadata.

If you want only local logout, you can remove SAML2 from the <Logout>
element in the configuration and leave only Local.

Alternatively if you needed something more complex that left /Logout using
both but needed a local-only way to do it, that's possible, just more
config work.

-- Scott