<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><span>Hi Peter thank you so much for your prompt response.</span></div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>I read the article and i contacted my idp and got the logout url. </span></div><div style="background-color: transparent;"><span>https://myidp.org/siteminderagent/smlogout.asp?AppReturnUrl=https://mysite.com/mysite/.<br></span></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><span><br></span></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family:
'times new roman', 'new york', times, serif; font-style: normal;"><span>so when i click the logout i go to my idp apge where it states that you have successfully logged out and a label appears with the option "click here to navigate back to the site",</span></div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;"><span>Once i click this this takes me to my url - </span>https://mysite.com/mysite/ i mentioned in the "return", but the problem is it goes directly and doesnt ask me to re-authenticate.</div><div style="background-color: transparent; color: rgb(0, 0, 0); font-size: 16px; font-family: 'times new roman', 'new york', times, serif; font-style: normal;">i directly go to my app without authenticating.</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"><br></div> <div style="font-family:
'times new roman', 'new york', times, serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> Peter Schober <peter.schober@univie.ac.at><br> <b><span style="font-weight: bold;">To:</span></b> users@shibboleth.net <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, July 5, 2013 11:45 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Logout with new shibboleth sp<br> </font> </div> <div class="y_msg_container"><br>* Justin Russo <<a ymailto="mailto:justin9@ymail.com" href="mailto:justin9@ymail.com">justin9@ymail.com</a>> [2013-07-05 17:20]:<br>> for the logout part, i have a button on my page which on click event<br>> is linked to the url - https://mydomain.com/Shibboleth.sso/Logout.<br><br>You're aware of the many problems with
logout?<br><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/SLOIssues" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/SLOIssues</a><br><br>What SAML IdP are you using?<br><br>> 1. after the default logout page seen, when i hit back button on my<br>> browser i can still see the pages of a logged in user, how can i<br>> prevent this.<br><br>Unless your IdP implements SLO that's almost immaterial since as long<br>as your HTTP User Agent has a valid session at the IdP ("SSO") you'll<br>be logged in to any SP immediately anyway.<br><br>> 2. i know that when i click logout<br>> (<a href="https://mydomain.com/Shibboleth.sso/Logout" target="_blank">https://mydomain.com/Shibboleth.sso/Logout</a>), i go to the deafult<br>> shib logout page, i also have a custom logout page, can i redirect<br>> it to my custom logout page but at the backend make sure everything<br>> works fine. How can i achieve
this.<br><br>Look for "return" on the page<br><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator</a><br>/Shibboleth.sso/Logout?return=<urlencoded-resource><br><br>-peter<br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br></div> </div> </div> </div></body></html>