Single log out across all service providers

[Cantor, Scott]

On 9/13/13 10:55 AM, "Brian Reindel" <brian at reindel.com> wrote:

>3.) When the user clicks a logout link in any of the service providers
>we first delete all cookies that start with "_shibsession_". We don't
>have to know about the path, since it is now "/", and any sessions
>created in any of the service providers are now deleted.

I would suggest you use cookieName to control the prefix there, because I
don't commit to maintaining that as a public API, which is why it's not
documented. There is an option to export the cookie name to a variable an
application can read, but of course that's specific to one SP.

-- Scott