Federation Security Services Guide › Authenticate WS-Federation Users at a Resource Partner › Implement WS-Federation Signout

Implement WS-Federation Signout

Signout allows near-simultaneous logout of all sessions for browser session associated with a particular user. The benefit of the signout feature is that it ensures no sessions are left open within a browser session for unauthorized users to gain access to resources at the Resource Partner.

Signout can be initiated via user's browser from a link at the Resource Partner or at the Account Provider that directs the browser to the Signout servlet at the Account Partner. This servlet, which is a component of Federation Web Services, processes signout requests and responses coming from a Resource Partner or Account Partner; however, the servlet does not need to know the originator of the request or response. It uses the SiteMinder session cookie to determine which session to end.