Logout UI question for the community

Cantor, Scott cantor.2 at osu.edu
Wed Nov 30 17:15:44 EST 2016


On 11/30/16, 5:11 PM, "users on behalf of Andrew Morgan" <users-bounces at shibboleth.net on behalf of morgan at orst.edu> wrote:

>    We don't think that Single Logout will ever work with all of our SPs, so 
>    we don't plan to enable it.  :)

It's not really debateable that it will ever work with all anybody's SPs, but the underlying reason for my question is the idea that my current "not doing SLO" logic at the IdP in tOSU's deployment would be changed to "do as much SLO as I can and don't bother reporting the results".

It's just risk reduction. Why not do it if it's invisible (including any and all errors) and at least clears a few sessions?

That's a different proposition from "make it accessible", which Unicon might manage to help us get fixed but I'm increasingly questioning the value.

Do you think you would deploy that?

-- Scott




More information about the users mailing list