<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Would it be possible to pull something (NameId) from a log file and use that information to synthetically generate a browser-logout-simulating web request?</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">(We take this approach to disable CAS TGTs after the passwords of hacked accounts are changed.)<br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Just a thought,</p>
<p style="margin-top:0;margin-bottom:0"> Bert Bee-Lindgren</p>
<p style="margin-top:0;margin-bottom:0"> Georgia Tech<br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" color="#000000" face="Calibri, sans-serif"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Tom Noonan <tom@joinroot.com><br>
<b>Sent:</b> Tuesday, February 20, 2018 3:20 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: Manually force Shibboleth SP to expire/invalidate all sessions</font>
<div> </div>
</div>
<div>
<div dir="ltr">So there's no way to expire out the known sessions in shibd? That's really what I need, I don't need to logout users at the IdP level.</div>
<div class="x_gmail_extra"><br clear="all">
<div>
<div class="x_gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div><span style="font-size:12.8px">--Tom Noonan II</span><br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="x_gmail_quote">On Tue, Feb 20, 2018 at 3:16 PM, Cantor, Scott <span dir="ltr">
<<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
> Is there more graceful option than restarting the shibd process?<br>
<br>
There's no administrative logout mechanism, and building one would depend on the SAML NameID received, rather than anything one probably would expect to be able to use from outside the running system. But it could potentially be built provided that were known.<br>
<span class="x_HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">
https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.<wbr>net</a><br>
</font></span></blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</body>
</html>