SLO observations

[Peter Schober]

* Cantor, Scott <cantor.2 at osu.edu> [2016-02-24 16:17]:
> > By checking the log, it looks to me that Shibboleth SLO flow
> > destroys the IdP session before the user clicks Yes/No. Is this on
> > purpose?
> 
> Yes.

This behaviour doesn't make a lot of sense to me, esp if answering
"no" kills off any chance of using SLO in the near future (since the
IDP will have forgotten about any other SPs I had sessions with).

Why even ask if you've prevent 1 of the 2 possible outcomes from
working in the future anyway?

Personally I'd rather see a breaking change now than later, while
noone can claim to have rolled out this feature widely and influenced
user expectations by the existing behaviour.
-peter