SLO SessionNotFound

[Cantor, Scott]

> BTW, idp.properties states:
> 
> > # Set to "shibboleth.StorageService" for server-side storage of user
> > sessions #idp.session.StorageService = shibboleth.ClientSessionStorageService

Yes, that's the default.

> but this instruction resulted in failure in my environment.
> I cannot find how to make shibboleth.StorageService server-side. It seems to
> use memory storage by default.

Memory would be server-side. shibboleth.StorageService is the bean for the default memory-only storage option that's not clusterable. The comment probably could note that I guess. But you can define your own storage service beans, then just set the various properties to reference that anyplace you want that bean used. There's really only one likely use case for server-side sessions, the ability to terminate an active session. We'll need to provide some user-level revocation features in V4 or V5.

-- Scott