IDP Logout, text asking user whether or not to kill the IDP session

[Jim Fox]

Steven asked what we tell people, not whether or not what we tell 
them actually works.

In most cases I think closing the browser does kill off the session cookies.
Are there browsers where a user cannot even configure it to work corectly?


Jim

> 
> Well, at least logout does not work at all. Exiting browsers doesn't work.
>
> -Bryan
>
>
>
> On 10/15/13 3:31 PM, "Jim Fox" <fox at washington.edu> wrote:
>
>>
>> It was always RL Bob's insistence that logging out of an app should not
>> necesssarily log one out of SSO.  When someone logs out of an app,
>> be it a shib sp or a weblogin sp, the user gets redirected to the weblogin
>> service where she is told, "You have logged out of xxxxxx.  You are still
>> logged in to weblogin as yyy.  Completely exit your browser to log out
>> of weblogin."
>>
>> Something like that.
>>
>> Jim
>>
>>
>> On Tue, 15 Oct 2013, Steven Carmody wrote:
>>
>>> Date: Tue, 15 Oct 2013 14:20:20 -0700
>>> From: Steven Carmody <steven_carmody at brown.edu>
>>> To: users at shibboleth.net
>>> Reply-To: Shib Users <users at shibboleth.net>
>>> Subject: IDP Logout, text asking user whether or not to kill the IDP
>>> session
>>>
>>> Hi,
>>>
>>> We're being presented with situations where it makes sense to have the
>>> user click a Logout button on the App, and be returned to the IDP Logout
>>> endpoint.
>>>
>>> IDP 2.4 includes support for that endpoint (and just destroys the
>>> session cookie). However, in our case, if the user is returned to that
>>> IDP endpoint we'd prefer to display a page asking the user if they want
>>> the IDP session destroyed; if they click YES then proceed. In most cases
>>> we expect they won't want to kill the IDP session.
>>>
>>> The problem is "how to ask that question". Most of the terms that
>>> denizens of this list use as part of that question aren't suitable for
>>> use when asking that question of a non-computer person.
>>>
>>> I'm wondering if other sites that have faced this situation are willing
>>> to share the text they've used to present this question ?
>>>
>>> Thanks in advance!
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>