Session 5 - Re-redirection to RP after the OP logout, or no redirection logout

[Ryo Ito]

At section 5, a user is sent to OP from RP, and processing is completed.

RP may want a user to come back after OP logout.

There are the following solutions. * Parameter for Re-redirection * RP opens OP logout URL using popup, and OP closes its window

[Michael Jones]

We could add an optional registration parameter allowing the OP to redirect back to the RP after logout.

A simpler alternative is to have the RP do the operation in a frame. Having a frame open to the OP would also facilitate letting the user log in again, if desired.

We decided to recommend the frame approach.

[Michael Jones]

Nat will add text to the spec to this effect.

[Michael Jones]

We need a continue URL to redirect to after logout and what to do if the user doesn't logout

[Michael Jones]

Mike will add the continue URL as part of the other other Session Management edits. This will be "MAY" behavior. More research on best practices may be needed.

[Michael Jones]

Fixed #634 - Re-redirection to RP after the OP logout

→ <<cset ee043787772f>>