<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Mar 3, 2020, at 1:12 PM, Cantor, Scott <<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">On 3/3/20, 1:39 PM, "users on behalf of Zico" <<a href="mailto:users-bounces@shibboleth.net" class="">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:mailzico@gmail.com" class="">mailzico@gmail.com</a>> wrote:<br class=""><br class=""><blockquote type="cite" class="">Seems like... IDP is killing it's own session but IDP generated ticket for CAS app is still there which is allowing user to<br class="">cas login even after logout from IDP. <br class=""></blockquote><br class="">The CAS ticket is not a long-lived thing, it has nothing to do with sessions or how logout happens. CAS logout is back channel only, it only works if the application isn't maintaining sessions in cookies and/or can't clear them from memory alone.<br class=""><br class=""></div></div></blockquote><br class=""></div><div>It doesn't appear to be back-channel only, it appears to in some cases pass a POST back thru the user's browser with a logoutRequest parameter. But it also doesn't seem to be consistent. But at least in some cases, it appears to be propagating the logout to participating CAS services thru such a POST thru the browser.</div><br class=""><div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;">--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>