User sessions mixed up when Java app deployed to Glassfish is fronted with Apache httpd

[Nate Klingenstein]

The best way for us to improve other aspects of the experience is to hear what was bad.

Some integrations(e.g. shib_auth below) actually give you the option of strongly tying the SP session to the application session or not.  That's one of the reasons I chose that integration as an exemplar.

https://spaces.internet2.edu/display/ShibInstallFest/Shibboleth+Workshop+Series+-+Linux+Service+Provider+%28CentOS+6.5%29

Remember that single sign-out support requires harmonizing Drupal, SP, and IdP sessions. This can be done, but it's more than you want to bother with now.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141030/9e4101cb/attachment.html