Single Logout (SLO)

[Cantor, Scott]

On 7/26/17, 12:33 PM, "users on behalf of Muzinich, Mike" <users-bounces at shibboleth.net on behalf of MuziniM at losrios.edu> wrote:

> We are fortunate as SP’s we deal with have ‘authentication cookies’ which are session based so closing the browser does require
> re-authentication. 

Wanna bet? You just don't have your browser configured like most people do.

> Blocking access to SSO is not a standard function of the IDP, rather something custom we would have to develop, correct?

It is a standard feature to be able to customize the system to do things like that. As with all of its flexibility, it is targeted at somebody comfortable with Java, scripting, Spring, and generally doing advanced things with software.

-- Scott