Web Agent Guides › Web Agent Configuration Guide › Single Sign-On (SSO) › How Full Logoff Works

How Full Logoff Works

Full logoff support enables a Web developer to make sure that a user is completely logged off from a user session. This protects resources because it gives users a way to end a session without exiting the Web browser and prevents an unauthorized person from assuming control of an open session.

A full logoff uses the following process:

1. A user clicks a button to log off.
2. The Web Agent redirects the user to a customized logoff page that you created.
3. The Web Agent removes the session and authentication cookies from a user's browser.
4. The Web Agent also removes the session cookie from the local cookie domain and the cookie provider domain, which you specify for single sign-on environments.
5. The Web Agent calls the Policy Server and instructs the Policy Server to remove any session information.

   The user is completely logged off.