Single Logout
Tomaz Majerhold
tomaz.majerhold at arnes.si
Mon Dec 1 03:01:33 EST 2014
Dne 28.11.2014 21:13, piše Cantor, Scott:
> On 11/27/14, 3:02 PM, "Tomaz Majerhold" <tomaz.majerhold at arnes.si> wrote:
>> If application manage there own session is there any way that the
>> application query SP if user is logout.
>>
>> It would be very handy if could be possible something like that:
>>
>>
>> https://localhost/Shibboleth.sso/isLogout?shib-session-id=_74d9c6089e14298
>> 3d8171ab8fc045552
>>
>> return: true | false
>>
>> so if true then application can invalidate session.
> Aside from the Notify hook (which is not SOAP based unless you're doing
> back-channel logout), this all works if you just use passive session
> control in your app, and have the SP cover your application code (or part
> of) with protection rules, but leave requireSession off. Then you get the
> session data in the request if it exists, and not if it doesn't.
>
> -- Scott
>
So if I have 1 SP and multi virtual host which host each application,
can I configure SP for each virtual host to send notification?
Regards, Tomaz
More information about the users
mailing list