diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2015-04-21 09:44:04 -0400 |
|---|---|---|
| committer | Patrick Uiterwijk <puiterwijk@redhat.com> | 2015-05-12 00:39:26 +0200 |
| commit | 085327baa87a990d0d986861a23305dc03530d71 (patch) | |
| tree | 8c84a9601b63c8e73e3a2bc5573bb56648482b6d /less | |
| parent | 93c25cc530a6c1b166af729e7a95ffd2f5a6a4d4 (diff) | |
| download | ipsilon-085327baa87a990d0d986861a23305dc03530d71.tar.gz ipsilon-085327baa87a990d0d986861a23305dc03530d71.tar.xz ipsilon-085327baa87a990d0d986861a23305dc03530d71.zip | |
Update IdP-initiated logout to use SAML2 Store
This moves the order in which the "fake" session is created and
it gives it a unique ID rather than using a fixed value.
Rely on the LogoutRequest request ID so we can get the
order of logout correct.
The basic idea is a logout request is created for the IdP
containing the URL of the IdP itself as the RelayState. A
session is picked and a LogoutRequest generated and sent.
There will be a LogoutRequest/LogoutResponse back and forth
until there are no more sessions to log out. The last
session will be this "fake" session that started it all
and the user will be redirected to the main page of the IdP.
https://fedorahosted.org/ipsilon/ticket/90
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Diffstat (limited to 'less')
0 files changed, 0 insertions, 0 deletions