Reputation: 1
I have developed an application as SP using OpenAM fedlet. Single Sign on is working fine and Single Sign out also happening from Idp (Idp is SimpleSAMLPHP).
But Im facing one issue, when I have connected two SP's and do single sign out its successfully signed out from Idp but the local session for second SP
still exists and able to access the site even after logged out of Idp.
I assume that for each request in SP should validate whether valid session exists in Idp, but I'm unable to find how to do with OpenAM fedlet.
Can you please give me some valuable input to signout local session of SP when signout is happened from any other SP.
Regards Arjun S
Upvotes: 0
Views: 270
Reputation: 2744
If you're not using OpenAM but only OpenAM Fedlet you might be better of using Spring Security SAML extension as OpenAM Fedlet requires much more work than Spring Security SAML extension.
Upvotes: 1