IDP Logout, text asking user whether or not to kill the IDP session

[Bryan E. Wooten]

Well, at least logout does not work at all. Exiting browsers doesn't work.

-Bryan



On 10/15/13 3:31 PM, "Jim Fox" <fox at washington.edu> wrote:

>
>It was always RL Bob's insistence that logging out of an app should not
>necesssarily log one out of SSO.  When someone logs out of an app,
>be it a shib sp or a weblogin sp, the user gets redirected to the weblogin
>service where she is told, "You have logged out of xxxxxx.  You are still
>logged in to weblogin as yyy.  Completely exit your browser to log out
>of weblogin."
>
>Something like that.
>
>Jim
>
>
>On Tue, 15 Oct 2013, Steven Carmody wrote:
>
>> Date: Tue, 15 Oct 2013 14:20:20 -0700
>> From: Steven Carmody <steven_carmody at brown.edu>
>> To: users at shibboleth.net
>> Reply-To: Shib Users <users at shibboleth.net>
>> Subject: IDP Logout, text asking user whether or not to kill the IDP
>>session
>> 
>> Hi,
>>
>> We're being presented with situations where it makes sense to have the
>> user click a Logout button on the App, and be returned to the IDP Logout
>> endpoint.
>>
>> IDP 2.4 includes support for that endpoint (and just destroys the
>> session cookie). However, in our case, if the user is returned to that
>> IDP endpoint we'd prefer to display a page asking the user if they want
>> the IDP session destroyed; if they click YES then proceed. In most cases
>> we expect they won't want to kill the IDP session.
>>
>> The problem is "how to ask that question". Most of the terms that
>> denizens of this list use as part of that question aren't suitable for
>> use when asking that question of a non-computer person.
>>
>> I'm wondering if other sites that have faced this situation are willing
>> to share the text they've used to present this question ?
>>
>> Thanks in advance!
>> --
>> To unsubscribe from this list send an email to
>>users-unsubscribe at shibboleth.net
>>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net