SP Initiated Logout with failed IDP logout request
Cantor, Scott
cantor.2 at osu.edu
Wed Jul 7 15:13:12 UTC 2021
If the logout request fails, then the user hasn't been logged out of anything but your SP. And closing a browser probably does nothing, that depends on settings.
> What I am seeing is that the user seems to be able to directly log back in.
The log explicitly shows it forming and issuing a request to the IdP, which is definitely not "directly logged back in".
-- Scott
More information about the users
mailing list