News for hackers. Stuff that matters.

A comment on The Difficulties of SAML Single Logout. Parent comment

Re:The Difficulties of SAML Single Logout by mooreds on Tuesday March 16, 2021 @11:12PM (#26486083)
Doesn't it depend on who controls apps A and B? If they are COTS or created by different parties, then all best are off. But if all three apps are created by the same org, which can specify standards, doesn't one have some hope?
[ Parent | on HN ]
Re:The Difficulties of SAML Single Logout by emodendroket on Tuesday March 16, 2021 @11:41PM (#26486257)
The whole point of SAML is that you can manage your users for third-party applications in your normal user store instead of needing to provision accounts in multiple places.
[ Parent | on HN ]
Re:The Difficulties of SAML Single Logout by pionar on Tuesday March 16, 2021 @11:54PM (#26486345)
Somewhat, but it still requires a lot of storage of state and coordination between systems. This isn't SAML specific, it's a property of any federated login (SSO) protocol.
[ Parent | on HN ]