Logout leaves the user logged into the IDP
Closed this issue · 2 comments
zanderwar commented
When logging out, the request is broadcasted to all SP's fine, but you remain logged in to the IDP, so when the SP returns you to log in, you're still logged in despite logging out.
This may not be a bug, but didn't feel semantically correct.
upwebdesign commented
@zanderwar Simply logout your users as you would normally, POST
to /logout
or what ever route you are using. There is an event listener on Illuminate\Auth\Events\Logout
to handle SLO.
zanderwar commented
Perfect, thanks