- changed status to resolved
Session 5 - Re-redirection to RP after the OP logout, or no redirection logout
Issue #634
resolved
At section 5, a user is sent to OP from RP, and processing is completed.
RP may want a user to come back after OP logout.
There are the following solutions. * Parameter for Re-redirection * RP opens OP logout URL using popup, and OP closes its window
Comments (6)
-
-
-
assigned issue to
- changed status to open
Nat will add text to the spec to this effect.
-
assigned issue to
-
-
assigned issue to
- edited description
-
assigned issue to
-
We need a continue URL to redirect to after logout and what to do if the user doesn't logout
-
-
assigned issue to
- edited description
Mike will add the continue URL as part of the other other Session Management edits. This will be "MAY" behavior. More research on best practices may be needed.
-
assigned issue to
-
- changed status to resolved
Fixed
#634- Re-redirection to RP after the OP logout→ <<cset ee043787772f>>
- Log in to comment
We could add an optional registration parameter allowing the OP to redirect back to the RP after logout.
A simpler alternative is to have the RP do the operation in a frame. Having a frame open to the OP would also facilitate letting the user log in again, if desired.
We decided to recommend the frame approach.