<div dir="ltr"><font face="arial, helvetica, sans-serif">we implemented the <span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px">Shibboleth.sso/Logout</span></font><div style>
<font color="#333333" face="arial, helvetica, sans-serif"><span style="font-size:12px;line-height:20.46875px">but have a question:</span></font></div><div style><font face="arial, helvetica, sans-serif"><font color="#333333"><span style="font-size:12px;line-height:20.46875px">1. user logs out of SP application and calls </span></font><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px">Shibboleth.sso/Logout</span></font></div>
<div style><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px"><font face="arial, helvetica, sans-serif">2. then user logs out of the single-sign on ,ie. iDP logout</font></span></div>
<div style><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px"><font face="arial, helvetica, sans-serif">3. close the browser</font></span></div><div style><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px"><font face="arial, helvetica, sans-serif"> Can the user still access the SP application if logged out of iDP?</font></span></div>
<div style><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px"><font face="arial, helvetica, sans-serif"> if the user can still access the SP application without logging into iDP (after iDP logout) , what will be the reason for that ?</font></span></div>
<div style><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px"><font face="arial, helvetica, sans-serif"><br></font></span></div><div style><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-size:12px;line-height:20.46875px"><font face="arial, helvetica, sans-serif">does SP has any control on the iDP session , or is it iDP's responsibility to expire or remove the cookie on iDP logout?</font></span></div>
<div style><span style="background-color:rgb(245,245,245);color:rgb(51,51,51);font-family:'Bitstream Vera Sans Mono','Andale Mono',Courier,monospace;font-size:12px;line-height:20.46875px"><br></span></div>
<div><div style>thanks</div>-- <br>Sam Jacob
</div></div>