Which handler LDAP SSO - NOW kerberos integration

Peter Schober peter.schober at univie.ac.at
Wed Nov 19 13:06:25 EST 2014


* Cantor, Scott <cantor.2 at osu.edu> [2014-11-19 18:18]:
> Add in that using desktop authentication makes web logout even more
> impossible than it already is (and yet people still ask for it)

Which is why I always suggest doing exactly that (integrating with
desktop authentication) to those people asking for SAML SLO.
Then the "protect the desktop, not just the browsers SSO session"
argument returns with a vengence.

> When you've managed to reach "harder to configure than
> certificates", you're really lapping the field.

Another worthy entry for the collection. ;)
-peter


More information about the users mailing list