The Difficulties of SAML Single Logout

Re:The Difficulties of SAML Single Logout by abraae on Wednesday March 17, 2021 @02:51AM (#26487414)

Dealing with auth, including single lockout, is all much easier if you can put all your systems behind a single reverse proxy on a single domain.

(Certainly that's not always possible, but for many systems it is).

[ Parent | on HN ]

Re:The Difficulties of SAML Single Logout by 35fbe7d3d5b9 on Wednesday March 17, 2021 @11:06AM (#26492229)

There's a reason huge enterprises still pay big money for stuff like CA's Siteminder: it's way easier to bolt an agent along side your crappy internal app that thinks about this stuff for you.

[ Parent | on HN ]

Re:The Difficulties of SAML Single Logout by emmelaich on Wednesday March 17, 2021 @06:12AM (#26488905)

Like https://www.forgerock.com/ formerly known as OpenAM / OpenSSO.

It's not fun to administer.

[ Parent | on HN ]