IdP will be posting the SAML Logout Request to the SLO endpoint of your SP. You need to implement servlet/listener to process and validate this message and then identify the user browser session (cookie or session) and invalidate the session. It is your choice to show a different page on logout or kill the window.
On Wed, Mar 12, 2014 at 2:42 PM, Phalguni Mukherjee <> wrote:
When the user have a session timeout in IDP, it notifies SP about it, how to get the SP side session and invalidate in such notification, as notification request is a new request from IDP to SP
--
Thanks & Regards
Phalguni Mukherjee
--
Regards
Prabhat
