administratively terminate specific SP session

[Scott Koranda]

> * Scott Koranda <skoranda at gmail.com> [2018-02-21 19:26]:
> > > > If not, will you entertain a feature request for such capability?
> > > 
> > > I'm willing (esp. if it's divorced from having to implement SAML
> > > administrative logout and let the IdP know) but it won't work with the
> > > client-side feature in V3 unless we come up with some ugly workaround
> > > like a session blacklist I guess.
> > 
> > I specifically wrote 'entertain' because I am not convinced, based on
> > the other thread, the effort would be worth it. Especially if it cannot
> > be recovered for V3.
> 
> I didn't understand the comments about a v3 SP to mean that it will no
> longer be able to use server-side session storage?
> If that's correct then whatever you do today you could still do with
> v3, you just can't have it both ways: "stateless clustering" and
> "server-side session removal" at the same time.

FWIW, LIGO does not currently operate any SPs that require or desire
stateless clustering and server-side sessions are working fine.

Server-side session removal, as detailed on this thread, is a higher
priority for LIGO than stateless clusterning.

Thanks,

Scott K for LIGO