Grouper Users - Open Discussion List

[David Langenberg <>]

On the SP, you can kill a session by directing the browser to /Shibboleth.sso/Logout

IdP side, it's up to your IdP admins to enable Logout support (available since 2.4.0)

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPEnableSLO

Dave

On Tue, Nov 25, 2014 at 9:35 AM, Eric Cheu <> wrote:

IMO, there should be a way to delete shibboleth browser cookies without actually having to close the browser.  I was able to do it manually in firefox by going through the menu system and actually looking for the shibboleth cookies and manually deleting them.  That got the desired effect of doing a global IDP logout without having to close the browser.  It is a harder sell to use shibboleth for certain applications if logging out of shibboleth is unintuitive for students using shared computers on a network.

On Wed, Nov 19, 2014 at 11:46 AM, Rob Gorrell <> wrote:

I'm not much of an SP guy, so I could use some help here. We currently have the grouperUI set up behind a shibb SP to process authentication into grouper. Works great. However. Looks like the standard logout is to redirect to logout.do which only kills the app session. Is there a way we can tell grouper to additionally redirect to our IDP's logout page so we can perform a logout there as well?

-Rob

--

Robert W. Gorrell
Systems Architect, Identity and Access Management

University of NC at Greensboro
336-334-5954
PGP Key ID B36DB0CA

--

David Langenberg

Identity & Access Management

The University of Chicago