[mitreid-connect] simple-web-app and OIDC : single logout

[Zhanna Tsitkov]

Thanks, Justin, for the info.
If/when this feature is implemented in MitreID Connect, will it be available for 1.2.x and 1.1.x versions, or 1.2.x only?
Thanks,
Zhanna
On Aug 17, 2015, at 12:23 PM, Justin Richer <jricher at MIT.EDU> wrote:

> Yes, that is intentional. The web sessions between the two applications are different, and you don't want a single RP to be able to force a logout at the IdP. The OIDC Session Management spec (still in draft) does have a mechanism to let an RP request a logout at the IdP, but that has not yet been implemented in MITREid Connect.
> 
> -- Justin
> 
> On 8/17/2015 10:02 AM, Zhanna Tsitkov wrote:
>> Hi,
>> While testing with the simple-web-app I’ve noticed that logout from the application does not cause the OIDC logout.  Was it intentional?  What are the recommendations how to implement single logout?
>> Thanks,
>> Zhanna
>> _______________________________________________
>> mitreid-connect mailing list
>> mitreid-connect at mit.edu
>> http://mailman.mit.edu/mailman/listinfo/mitreid-connect
>