News for hackers. Stuff that matters.

A comment on The Difficulties of SAML Single Logout. Parent comment

Re:The Difficulties of SAML Single Logout by yread on Wednesday March 17, 2021 @04:12AM (#26487860)
Apps A and B could just keep a list of expired cookies and the IdP could add to that list using a server-to-server call.
[ Parent | on HN ]
Re:The Difficulties of SAML Single Logout by bandie91 on Wednesday March 17, 2021 @04:40AM (#26488037)
the main idea of SAML is not to do direct server-to-server communication.
[ Parent | on HN ]
Re:The Difficulties of SAML Single Logout by kevincox on Wednesday March 17, 2021 @12:31PM (#26493452)
This is how it should work. But I don't think any popular system implements this.
[ Parent | on HN ]