SP client-side session storage and originating IdP

[Cantor, Scott]

> The docs say that you provide a list of attributes that you want to store in the
> cookie. I assume these are attribute friendly names as configured in the
> attribute map.

Yes.

> I'm wondering what other non-attribute information gets stored in the cookie.
> Specifically, will another clustered SP node know the IdP that generated the
> assertion to be able to initiate a federated logout?

Yes, but inbound logout won't work reliably if the reverse mappings aren't clustered, which defeats the purpose in most cases so logout will be more unreliable than it already is.

-- Scott