DataSealer dependencies

[Marvin Addison]

On Thu, Mar 10, 2016 at 9:40 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > There is no "CAS session" per se; the CAS session is the IdP session.
> The IdP
> > session does the session tracking, the CAS protocol simply looks up the
> IdP
> > session and stores the service information (if the session is found).
> This is the
> > functionality that you'd lose with dropping server-side storage: no SLO
> for
> > CAS services.
>
> If the logout is front-channel, you wouldn't lose that.
>

I don't see how session tracking would work without server-side storage. I
have to grab the IdPSession on the back channel in order to add the
CASSPSession to it. Do you see how that would work?

M <users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160310/3c67583b/attachment.html>