CAS app logout in IDP SLO

Cantor, Scott cantor.2 at
Tue Mar 3 14:12:33 EST 2020

On 3/3/20, 1:39 PM, "users on behalf of Zico" <users-bounces at on behalf of mailzico at> wrote:

> Seems like... IDP is killing it's own session but IDP generated ticket for CAS app is still there which is allowing user to
> cas login even after logout from IDP. 

The CAS ticket is not a long-lived thing, it has nothing to do with sessions or how logout happens. CAS logout is back channel only, it only works if the application isn't maintaining sessions in cookies and/or can't clear them from memory alone.

-- Scott

More information about the users mailing list