v3 IdP SAML2 logout and external authentication with controlling session

[Cantor, Scott]

On 4/20/15, 9:55 AM, "Scott Koranda" <skoranda at gmail.com> wrote:
>
>My high level view is that after I write some simple code to actually
>effect the trip I should be able to inject it into the flow in a
>relatively straightforward way and SWF will "do the right thing".

It really depends what exactly you end up doing, but if you're actually modifying the flow itself, you can certainly get it to do just about anything you want.

>Ignoring the more global issues, is there any reason from the IdP
>technical viewpoint that this approach would be a "bad thing" and I
>should not explore it?

Well, my assumption wrt to logout would normally be that you'd do this by customizing the response to the logout in some way, so more doing this at the end of the process than injecting it in the middle. For example, adding a redirect to the logout response view template.

-- Scott