Question related to "Local Logout" provided by Shibboleth IdP 2.4.0

[Jan Keirse]

On Thu, Aug 29, 2013 at 4:34 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> There is no commitment to do anything else with logout because none of the
> technical challenges associated with it have been solved. I am not going
> to see us ship something that depends on third-party cookies, which means
> logout will only work with systems that support back channel requests or
> that can terminate front channel sessions without access to a cookie.
> There are very few complex apps that meet either requirement.
>
> I realize there are people who think logout is a practical idea. None of
> them have, to my knowledge, ever worked directly with the project on
> implementing it. Ultimately for something to be implemented, it ought to
> be done by people with a belief in the concept and an understanding of, in
> their mind at least, what's necessary to do it.

Would it be a feasible option to serve a page to the end user after
logout.jsp that contains iframes for each service provider's logout
page?
That may require an extention to the protocol to let the service
provider provide it's logout url to the IDP.

-- 


**** DISCLAIMER ****

http://www.tvh.com/newen2/emaildisclaimer/default.html

"This message is delivered to all addressees subject to the conditions
set forth in the attached disclaimer, which is an integral part of this
message."