How to force a login from particular IdP when accessing specific folder

[Cantor, Scott]

> Do you mean that when the user tries to access the Prod folder I can
> automatically log them off Alpha and start a new session? How do I do that?
> What are the keywords?

I don't know how you're doing authorization, so I wasn't talking in specifics.

Logout is just redirect to /Shibboleth.sso/Logout, but if you want to maintain control, that can't be a global/SAML logout, it would have to be configured to be local-only, just clearing the local session.

The other way to think about it is that you wouldn't necessarily have to do a logout at all, if you just force the browser back through a manual session initiation redirect at /Shibboleth.sso/Login. Within a given application, only one session at a time can be represented in the browser, so the new one would overwrite the old one.

-- Scott