[mitreid-connect] Session Management

Christian Metzler christian.metzler at abas.de
Mon Jun 2 09:36:57 EDT 2014


Is this Mailing List up to date? Or is there a different way to get answers to my questions on MitreID Connect?

Am 19.05.2014 um 11:04 schrieb Christian Metzler <Christian.Metzler at abas.de>:

> Hi,
> 
> I'm currently evaluating the MitreID Connect implentation. I wonder if 
> there are plans to implement the Session Management specification 
> according to http://openid.net/specs/openid-connect-session-1_0.html
> 
> In addition I would be interested if it is possible to revoke all tokens 
> for a specific user session programatically. This would enable a single 
> logout. My idea is to specify a new scope (similar to offline_access) 
> called online_access which specifies, that a client only can get new 
> access tokens as long as the session is alive.
> 
> Regards,
> 
> Christian
> _______________________________________________
> mitreid-connect mailing list
> mitreid-connect at mit.edu
> http://mailman.mit.edu/mailman/listinfo/mitreid-connect
> 




More information about the mitreid-connect mailing list