force termination of SSO session?

[Cantor, Scott]

On 7/22/21, 5:22 AM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

>    There's the account lockout feature:    
>    (I'd expect this to prevent getting new assertions sent to any SPs.)

It does not, that's authentication only.

The IdP does not support administrative logout.

The closest to "terminating" a session is installing a context check rule based on username and restarting all the servers, which is obviously not what anybody would view as a practical solution, but it's all there is.

-- Scott