Symptom:
A user authenticates at the IdP and is redirected back to the SP with an assertion. If the user clicks the browser back button upon returning to the SP, the session index is updated and stored in the SP session store.
When the user logs out, SiteMinder uses the session index from the original assertion, resulting in a session index mismatch. Single logout, if configured, fails.
Solution:
A new setting named Reuse Session Index has been added to the Single Logout tab of the SAML 2.0 Service Provider Properties. Enable this option so single log out works with third-party partners that do not honor the session index passed in newer assertions.
STAR Issue: 19613507-1
|
Copyright © 2012 CA.
All rights reserved.
|
|