Disable SSO session

[Andrew Morgan]

How do I disable the SSO session in v3.2?

In v2.4, I commented out the PreviousSession handler in handler.xml, like 
so:

     <!--
         Removal of this login handler will disable SSO support, that is it will require the user to authenticate
         on every request.
     -->
     <!-- disable SSO session, delegate SSO session to CAS
     <ph:LoginHandler xsi:type="ph:PreviousSession">
         <ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession</ph:AuthenticationMethod>
     </ph:LoginHandler>
     -->


I tried this in idp.properties:

   # Set to false to disable the IdP session layer
   idp.session.enabled = false

but I'm still seeing the SSO session used.

I delegate authentication to CAS via the RemoteUser flow so I don't want 
the IDP to handle SSO.

Thanks,
 	Andy