destroying user IdP session as part of profile intercept flow

[Cantor, Scott]

On 2/3/16, 12:24 PM, "users on behalf of Scott Koranda" <users-bounces at shibboleth.net on behalf of skoranda at gmail.com> wrote:



>Is there an elegant way for a post-intercept flow to kill a
>user's IdP session if it is deemed appropriate by the flow's
>logic?

You can write an action that checks the SessionContext for a session and destroys it and then make sure to clear the field in the SessionContext, or just remove it. Provided there aren't bugs in other places, that should be innocuous to the rest of the system, and it certainly destroys the session.

-- Scott