Invoke correct Logout method

Domenico Cervino cervinodomenico at libero.it
Thu May 16 14:44:01 UTC 2024


Hi,
for the logout of the IdP must we always invoke the endpoint "/profile/Logout" which makes us pass through logout.vm?
Due to other specific operations to be carried out during the logout phase, we have written a custom Java Servlet in which to manage the logout (with another endpoint to call) .
At the end of the procedure we delete every cookie and attribute in the session and invalidate the session, but after our custom logout the user is still authenticated.
Is there something we're missing that we can call in Java to log out programmatically? Something similar to ExternalAuthentication.startExternalAuthentication and ExternalAuthentication.finishExternalAuthentication for the login custom?
 
We have idp version 4.
 
Thanks
Domenico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240516/abdaefe7/attachment.htm>


More information about the users mailing list