Single log out across all service providers

Brian Reindel brian at reindel.com
Fri Sep 13 13:25:01 EDT 2013


Thank you for pointing that out. I will definitely do that.

On Fri, Sep 13, 2013 at 11:02 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 9/13/13 10:55 AM, "Brian Reindel" <brian at reindel.com> wrote:
>
>>3.) When the user clicks a logout link in any of the service providers
>>we first delete all cookies that start with "_shibsession_". We don't
>>have to know about the path, since it is now "/", and any sessions
>>created in any of the service providers are now deleted.
>
> I would suggest you use cookieName to control the prefix there, because I
> don't commit to maintaining that as a public API, which is why it's not
> documented. There is an option to export the cookie name to a variable an
> application can read, but of course that's specific to one SP.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list