Implement Proper SLO Propagation to oxAuth
Opened this issue · 1 comments
uprightech commented
Currently, when the a SAML RP Client initiates SLO, after completion , only the user's shibboleth IDP sessions are terminated.
This leaves the user's OIDC sessions still active.
The aim of this ticket is to provide a corrective action to this, ensuring that all OIDC and SAML user sessions are terminated.
nynymike commented
Are you going to call OpenID Front channel logout too? Make sure there is a feature_flag for this configuration!