4 ms·
My (possibly misunderstood to the point of misphrasing) understanding, is that SAML still has the point-of-difference that your sso provider can cancel a sessio
by akdor1154 2y ago
My (possibly misunderstood to the point of misphrasing) understanding, is that SAML still has the point-of-difference that your sso provider can cancel a session. Is that right?
- Nextgrid 2y agoOIDC has out-of-band backchannel logout.
- akerl_ 2y agoCan it? In many SAML setups, there's not direct network interaction between the IDP and Service, other than at most sharing metadata via URL.
- recursive 2y agoThere's an optional feature in the spec I think. But in my very limited experience, it is never implemented or working correctly.
- p_ing 2y agoMicrosoft implements this in Azure/M365.