Logout without closing the browser

[Peter Schober]

* Marvin Addison <marvin.addison at gmail.com> [2015-12-09 16:28]:
> First, we need to clarify the meaning of "logout." I'll define it as
> follows: the IdP session ends and the application sessions of all services
> accessed during the SSO session are ended. That definition I would argue is
> most consistent with user expectation.

So you claim. IMO users insisting on having "logout" have simply
internalized what we have told them for decades in pre-SSO
pre-federation days. As such you could just as well claim that they
are attempting the reverse of clicking "log in" on every application:
clicking logout on every application once they're done.

Anyway, since this has now moved into a discussion of what SLO is or
shoud/should be I'll have to drop a reference to the documentation
here, so that people ignorant of all the issues can have a look at
those themselfs, before we have to repeat everything here, poorly:
https://wiki.shibboleth.net/confluence/display/CONCEPT/SLOIssues
Of course updates for v3 will need to be reflected there, at some point.
-peter