IDP Logout, text asking user whether or not to kill the IDP session

[Bryan E. Wooten]

Closing the browser doesn't work for our cas. IE, Firefox, or chrome. And our shib is backed by cas. Sigh.

Bryan

Sent from my Android phone using TouchDown (www.nitrodesk.com)

-----Original Message-----
From: Jim Fox [fox at washington.edu]
Received: Tuesday, 15 Oct 2013, 3:29pm
To: Shib Users [users at shibboleth.net]
Subject: Re: IDP Logout, text asking user whether or not to kill the IDP session



Steven asked what we tell people, not whether or not what we tell
them actually works.

In most cases I think closing the browser does kill off the session cookies.
Are there browsers where a user cannot even configure it to work corectly?


Jim

>
> Well, at least logout does not work at all. Exiting browsers doesn't work.
>
> -Bryan
>
>
>
> On 10/15/13 3:31 PM, "Jim Fox" <fox at washington.edu> wrote:
>
>>
>> It was always RL Bob's insistence that logging out of an app should not
>> necesssarily log one out of SSO.  When someone logs out of an app,
>> be it a shib sp or a weblogin sp, the user gets redirected to the weblogin
>> service where she is told, "You have logged out of xxxxxx.  You are still
>> logged in to weblogin as yyy.  Completely exit your browser to log out
>> of weblogin."
>>
>> Something like that.
>>
>> Jim
>>
>>
>> On Tue, 15 Oct 2013, Steven Carmody wrote:
>>
>>> Date: Tue, 15 Oct 2013 14:20:20 -0700
>>> From: Steven Carmody <steven_carmody at brown.edu>
>>> To: users at shibboleth.net
>>> Reply-To: Shib Users <users at shibboleth.net>
>>> Subject: IDP Logout, text asking user whether or not to kill the IDP
>>> session
>>>
>>> Hi,
>>>
>>> We're being presented with situations where it makes sense to have the
>>> user click a Logout button on the App, and be returned to the IDP Logout
>>> endpoint.
>>>
>>> IDP 2.4 includes support for that endpoint (and just destroys the
>>> session cookie). However, in our case, if the user is returned to that
>>> IDP endpoint we'd prefer to display a page asking the user if they want
>>> the IDP session destroyed; if they click YES then proceed. In most cases
>>> we expect they won't want to kill the IDP session.
>>>
>>> The problem is "how to ask that question". Most of the terms that
>>> denizens of this list use as part of that question aren't suitable for
>>> use when asking that question of a non-computer person.
>>>
>>> I'm wondering if other sites that have faced this situation are willing
>>> to share the text they've used to present this question ?
>>>
>>> Thanks in advance!
>>> --
>>> To unsubscribe from this list send an email to
>>> users-unsubscribe at shibboleth.net
>>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131015/11f00a93/attachment.html