Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Override Logout Functionality #5
SAML initiated logout doesn't work. We can probably redirect to OpenID Connect front channel logout, although SP's won't be notified about the logout event. Perhaps we can add SP's as sessions under the client (with respective logout URLs) so the iframes are rendered properly in the front channel logout page.
Another issue is that in a cluster, other shib IDP servers may have active sessions in memory. This solution may also require memcached session storage to really work in a cluster.