Shibboleth Developers

["RL 'Bob' Morgan" <>]

> The Logout element is of course mainly for 2.0, but I figured I'd just add a
> cookie clearing option now. It's not single logout, there's no IdP
> involvement, just give it a return location and it will clear the session
> and redirect back. If people want to build hacks on top of that, whatever,
> I'm just preparing for 2.0 or whatever we do between now and then.

In a single IdP scenario (ie, Shib as WebISO) it may be useful to have a 
configured location to send the user to after logout.  Pubcookie has 
this, and we encourage webapps to use it so users go to a well-known 
page on the weblogin server that tells them what's going on (as much as 
possible), as opposed to the app making stuff up.

On the other hand, just sticking a URL in here isn't really right, since 
what you want to say is "the Logout Service of my IdP"; but of course we 
don't get logout services, or metadata about them, until 2.0.  So maybe 
this can just be left to the app for now ...

 - RL "Bob"