Back button issue

[Cantor, Scott]

> I had a working session with a user and discovered that he
> had multiple tabs open in his browser, some of which he had
> kept open for several days.

Usually that "sort" of thing is what comes out of such an investigation (and you can't scale that to handle every user of course, which is why it's almost impossible to answer these sorts of complaints).

Having said that, I'm not aware of an issue with tabs that would manifest that way, unless you mean open tabs sitting in the middle of logging in, and then somebody trying to "resume" them. That of course is impossible after old sessions timeout.

They can cause some issues with SSO generally, and it will cause more frequent logins because of session data being out of sync in the browser in various ways, but it doesn't cause errors.

The IdP is compatible with tabs in general as far as allowing independent conversations going on with the same or different SPs (the very old IdP design had lots of issues with that, but Spring Web Flow allows for it).

-- Scott