Single Logout (SLO)

[Cantor, Scott]

On 7/26/17, 10:39 AM, "users on behalf of Muzinich, Mike" <users-bounces at shibboleth.net on behalf of MuziniM at losrios.edu> wrote:

> Thank you for the information.  Considering if one of the SP’s does not follow standards, as shocking as that might be, SLO could
> potentially not work, staying with “plastering” the web pages with close your browser to logout seems like a more viable
> solution.

All logout attempts will be partial and normally incomplete, that's the best case.

But closing the browser does nothing. Only clearing cookies will accomplish anything in most cases, though it depends on the browser and local configuration.

This is about shared machines; I would consider disabling SSO for shared machines when you know the networks involved, or at least minimize which SPs they can access based on business need.

-- Scott