IDP logout in V3

[Wessel, Keith]

Thanks, Scott. By "generally", are there caveots for IDP logout with session cookies that I need to be aware of?

A good call on consent. We're not currently doing any consent and, unless we're ready to roll that out right away, that's a decision we can make later.

Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, June 26, 2015 4:24 PM
To: Shib Users
Subject: RE: IDP logout in V3

> Is IDP logout (not single logout from all SPs) supported by the storage
> configuration that ships with V3?

Yes, generally.

> It seems to me that, if the user's IDP session is based on the session cookie in
> their browser and that's deleted, all IDP nodes will recognize the user as
> logged out (nothing in memory on the IDP nodes). Is that true?

Yes, that's true.

If we get local storage working, I would anticipate that we'll also be able to track the SP sessions and single logout should also be possible (for the usual definition of possible) with the same storage model. It's just a space issue right now.
 
> Please tell me it is so we can dump our database dependency and simplify
> things!

Well, there's still consent. If you already have a database, you might not want to throw that out when you can do cross-device consent with it.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net