Single log out across all service providers

[MA Lanxin]

Hello  Brian,

> We actually don't need to implement any front-channel or back-channel
> notifications for internal application session management because our
> IdP and all of our SPs are in the same security domain. We're going to
> end up deleting all domain cookies from the identity provider, which
> will in turn kill all sessions. I've tested in Firebug by removing all
> cookies after login, and it appears to be working.
> 
> Considering we're not running a federation (even in our enterprise) I
> guess we're lucky. I know this solution would not work for most
> people.

It seems that you alreday have implemented single logout in your domain.
Could you please explain more detail how you do that. Which version of Idp and Sps
do you use ? Did you develop a code which deleting all sessions cookies from IdP?

I need to do the same thing in my authentication based shibboleth. 
My IdP and SPs are in the same domain. I am using IdP 2.3.8 and SP 2.4.3 or SP 2.5

Thanks in advance!

Best regards,
Lanxin