OpenAM Fedlet单一注销

Question

I have developed an application as SP using OpenAM fedlet. Single Sign on is working fine and Single Sign out also happening from Idp (Idp is SimpleSAMLPHP).

But Im facing one issue, when I have connected two SP's and do single sign out its successfully signed out from Idp but the local session for second SP

still exists and able to access the site even after logged out of Idp.

I assume that for each request in SP should validate whether valid session exists in Idp, but I'm unable to find how to do with OpenAM fedlet.

Can you please give me some valuable input to signout local session of SP when signout is happened from any other SP.

Regards Arjun S

Answer 1

如果您不使用OpenAM，而仅使用OpenAM Fedlet，那么使用Spring Security SAML扩展可能会更好，因为OpenAM Fedlet比Spring Security SAML扩展需要更多的工作。