Strange Firefox/Shibboleth interaction with Cache-Control and shib session

[Cantor, Scott]

On 7/11/16, 5:28 PM, "users on behalf of Micky Williamson" <users-bounces at shibboleth.net on behalf of mwilliamson at silasg.com> wrote:

> I’m seeing a strange integration between Firefox caching, and Shibboleth.

This is how browsers work. Session restore is not a server issue, that's up to the client.

> The desired behavior is to have the user login to the app each time they open the browser. 

You cannot achieve that.

> This seems to work for Chrome,

That depends on the settings. Firefox just happens to use different defaults.

This is not about caching headers, it's about cookies and how browsers work today.

-- Scott