Use Front-Channel Logout from SSO#23243
Open
alexandrerw wants to merge 1 commit intoglpi-project:mainfrom
Open
Use Front-Channel Logout from SSO#23243alexandrerw wants to merge 1 commit intoglpi-project:mainfrom
alexandrerw wants to merge 1 commit intoglpi-project:mainfrom
Conversation
alexandrerw
force-pushed
the
feature/font-channel-logout
branch
from
9808638 to
3b20fdf
Compare
alexandrerw
force-pushed
the
feature/font-channel-logout
branch
from
3b20fdf to
ead36c1
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Checklist before requesting a review
Description
Added feature front-channel logout from SSO. In summary, the local session is invalidated upon receipt of a logout request from the Identity Provider (IdP), conveyed via an HTTP GET parameter. If the logout flow is aborted or not completed at the IdP level, the local session remains unaffected and continues to be valid. Additionally, the local session may also be invalidated when a logout request is initiated by a separate client application, enabling coordinated session termination across integrated systems.
Sequence diagrams