Help Troubleshooting significant delay in processing in SP

[Cantor, Scott]

On 2/24/22, 12:35 PM, "users on behalf of Jan Vilhuber" <users-bounces at shibboleth.net on behalf of JVilhuber at absolute.com> wrote:

    >    I need to revisit the cookie option. As discussed previously, I’m not super comfortable with the loss of
    > control on logout (being cognizant of the cesspool that is logout and SSO, anyway), when a deleted session
    > should stay deleted.

I guess to make sure there's no confusion, whatever risk is involved is only relevant if you're talking about an administrative logout situation. If the user logs out, it clears the cookie. If a user wanted to keep the session...they wouldn't logout.

The concern has to do with the administrative case in which the user wants the session and you don't. If you're not even allowing for that feature (and frankly, it's pointless to do it with the SP alone, since the IdP will usually just re-establish the session anyway), this really isn't much of a problem.

-- Scott