Previous Topic: Sign-Out Overview (WS-Federation)Next Topic: Authentication Context Processing


Local Logout at the SP (SAML 2.0)

CA SiteMinder® as an SP supports local logout for stand-alone applications. Local logout enables a user to be logged out at the local SP-side application. The session at the SP is removed, but no communication with the IdP or other SPs is involved. Sessions at the IdP and other SPs remain active.

If you include a logout link in an application at the SP, the SP sends a logout request to the local single logout service. The SP logs out the user upon receiving the request. The application at the SP is responsible for sending a confirmation message that the logout is successful.

CA SiteMinder® provides local logout using a query parameter named localLogout. To use this parameter, your application can have a page, such as the following example:

You have completed your registration with demoapp.
To end your session securely, select LOGOUT.

The following sample string represents the link for the LOGOUT button:

<http://sp1server.demo.com:8080/affwebservices/public/saml2slo?LocalLogout=true