SLO Keeping session

[Cantor, Scott]

On 3/15/16, 4:59 PM, "users on behalf of Robert Lamothe" <users-bounces at shibboleth.net on behalf of robert_lamothe at yahoo.com> wrote:



>    I've solved most of my shib problems but I have one that is proving to be very sticky.

Logout is not something you want to spend time on unless you're prepared to spend a lot.

>My SP has a logout button which I've used redirect to point to my SLO.

Are you trying to do a SAML logout or use the proprietary "clear this session" endpoint at /idp/profile/Logout? They are fundamentally different. And that's all separate from the propagation of logout, which is possible for CAS and SAML, but only under very particular circumstances.

-- Scott