On 3/12/14, 5:12 AM, "Phalguni Mukherjee"
<> wrote:
>When the user have a session timeout in IDP, it notifies SP about it, how
>to get the SP side session and invalidate in such notification, as
>notification request is a new request from IDP to SP
If you mean a SOAP based logout request, the answer is that you either
come up with a way, or you don't support it. Basically, you need server
side state/mappings, or you implement temporary server state that holds
onto the request so you can prevent the session from being used the next
time the session cookie shows up.
-- Scott
