IDP Logout, text asking user whether or not to kill the IDP session

[Jim Fox]

It was always RL Bob's insistence that logging out of an app should not 
necesssarily log one out of SSO.  When someone logs out of an app,
be it a shib sp or a weblogin sp, the user gets redirected to the weblogin
service where she is told, "You have logged out of xxxxxx.  You are still 
logged in to weblogin as yyy.  Completely exit your browser to log out
of weblogin."

Something like that.

Jim


On Tue, 15 Oct 2013, Steven Carmody wrote:

> Date: Tue, 15 Oct 2013 14:20:20 -0700
> From: Steven Carmody <steven_carmody at brown.edu>
> To: users at shibboleth.net
> Reply-To: Shib Users <users at shibboleth.net>
> Subject: IDP Logout, text asking user whether or not to kill the IDP session
> 
> Hi,
>
> We're being presented with situations where it makes sense to have the
> user click a Logout button on the App, and be returned to the IDP Logout
> endpoint.
>
> IDP 2.4 includes support for that endpoint (and just destroys the
> session cookie). However, in our case, if the user is returned to that
> IDP endpoint we'd prefer to display a page asking the user if they want
> the IDP session destroyed; if they click YES then proceed. In most cases
> we expect they won't want to kill the IDP session.
>
> The problem is "how to ask that question". Most of the terms that
> denizens of this list use as part of that question aren't suitable for
> use when asking that question of a non-computer person.
>
> I'm wondering if other sites that have faced this situation are willing
> to share the text they've used to present this question ?
>
> Thanks in advance!
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>