codegreencreative/laravel-samlidp

Logout leaves the user logged into the IDP

Closed this issue · 2 comments

When logging out, the request is broadcasted to all SP's fine, but you remain logged in to the IDP, so when the SP returns you to log in, you're still logged in despite logging out.

This may not be a bug, but didn't feel semantically correct.

@zanderwar Simply logout your users as you would normally, POST to /logout or what ever route you are using. There is an event listener on Illuminate\Auth\Events\Logout to handle SLO.

Perfect, thanks