[wsfed] Issue i008 Sign-out notification and priority

Title: Sign-out notification and priority

Issue i008

 

From:
 [mailto:] 

Sent: Monday, June 11, 2007 9:33 AM

To: 

Subject: [wsfed] Sign-out notification and priority

 

From banking
industry it is important to establish when the user signed out. It is important
to notify the user that they have sign-out. It is also important that if the
user is notified that they have signed out, then it is absolutely the case that
they are. Sign-out requests are browser redirects from IP to different web
Services, but what is the priority/order of these redirects? Sharing some
configured sign out priorities would allow the higher risk services, like banking
services, to be configured accordingly. 

Paul
Lesov, CISSP 

Wells
Fargo 

Security
Architecture, EIM/IST 

612 667
3319 

This message may contain confidential
and/or privileged information. If you are not the addressee or authorized to
receive this for the addressee, you must not use, copy, disclose, or take any
action based on this message or any information herein. If you have received
this message in error, please advise the sender immediately by reply e-mail and
delete this message. Thank you for your cooperation.