IDP logout in V3

[Cantor, Scott]

> Is IDP logout (not single logout from all SPs) supported by the storage
> configuration that ships with V3?

Yes, generally.

> It seems to me that, if the user's IDP session is based on the session cookie in
> their browser and that's deleted, all IDP nodes will recognize the user as
> logged out (nothing in memory on the IDP nodes). Is that true?

Yes, that's true.

If we get local storage working, I would anticipate that we'll also be able to track the SP sessions and single logout should also be possible (for the usual definition of possible) with the same storage model. It's just a space issue right now.
 
> Please tell me it is so we can dump our database dependency and simplify
> things!

Well, there's still consent. If you already have a database, you might not want to throw that out when you can do cross-device consent with it.

-- Scott