[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    Re: Geant OIDC extension: logout support?
From:       Liam Hoekenga <liamr () umich ! edu>
Date:       2019-07-23 19:33:11
Message-ID: CAH4ZtKQ0gC6iFPnbuCV2DAX89HA=m20EDTkbiiRiYxVx7XUgPw () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


My understanding is not is the GEANT OIDC does not currently support logout.

Liam

On Tue, Jul 23, 2019 at 3:21 PM Wessel, Keith <kwessel@illinois.edu> wrote:

> Hi, all,
>
> I just had a developer ask if the Geant OIDC extension has any type of
> support for logout and, if so, how to use it. I see nothing in the docs,
> and I see elsewhere that OIDC logout support is a developed but still
> optional part of the profile.
>
> Does the extension support logout at this point? Or is my best bet to tell
> him to log the user out locally then send the browser to
> /idp/profile/Logout on the IdP? That feels a little iffy at best, but if
> it's the best option for now, we'll roll with it.
>
> Thanks,
> Keith
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe@shibboleth.net
>

[Attachment #5 (text/html)]

<div dir="ltr">My understanding is not is the GEANT OIDC does not currently support \
logout.<div><br></div><div>Liam</div></div><br><div class="gmail_quote"><div \
dir="ltr" class="gmail_attr">On Tue, Jul 23, 2019 at 3:21 PM Wessel, Keith &lt;<a \
href="mailto:kwessel@illinois.edu">kwessel@illinois.edu</a>&gt; \
wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px \
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi, all,<br> <br>
I just had a developer ask if the Geant OIDC extension has any type of support for \
logout and, if so, how to use it. I see nothing in the docs, and I see elsewhere that \
OIDC logout support is a developed but still optional part of the profile.<br> <br>
Does the extension support logout at this point? Or is my best bet to tell him to log \
the user out locally then send the browser to /idp/profile/Logout on the IdP? That \
feels a little iffy at best, but if it&#39;s the best option for now, we&#39;ll roll \
with it.<br> <br>
Thanks,<br>
Keith<br>
<br>
-- <br>
For Consortium Member technical support, see <a \
href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" \
target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br> To \
unsubscribe from this list send an email to <a \
href="mailto:users-unsubscribe@shibboleth.net" \
target="_blank">users-unsubscribe@shibboleth.net</a><br> </blockquote></div>



-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net

[prev in list] [next in list] [prev in thread] [next in thread]