Single logout not working

Peter Schober peter.schober at univie.ac.at
Wed Dec 10 06:26:46 EST 2014


* rahul <rahulonsurvey at yahoo.com> [2014-12-10 07:57]:
> Instead of logging out of all SP is there support from shiboboleth IDP to
> logout from that particular SP which initiated the logout request ?.

The SP can terminate its own sesssion anytime, without involving the
IDP. But due to (assumed still active) SSO at the IDP that's not worth
anything, as the user agent can re-establish a new session at the SP
immediately. So you'd need to terminate the IDP's session too (or
"disable" SSO always by using forcedAuthn). And while disablling the
IDP's SSO session from an SLO request from an SP is supported by the
IDP it will leave all other SPs stranded with active sessions, so
nothing you can safely walk way from.
Did you look at the documentation I sent the URL for?
-peter


More information about the users mailing list