CAS app logout in IDP SLO

[Cantor, Scott]

On 3/3/20, 1:39 PM, "users on behalf of Zico" <users-bounces at shibboleth.net on behalf of mailzico at gmail.com> wrote:

> Seems like... IDP is killing it's own session but IDP generated ticket for CAS app is still there which is allowing user to
> cas login even after logout from IDP. 

The CAS ticket is not a long-lived thing, it has nothing to do with sessions or how logout happens. CAS logout is back channel only, it only works if the application isn't maintaining sessions in cookies and/or can't clear them from memory alone.

-- Scott