...
In a federated SSO scenario, to implement logout functionality, the following must be answered:
- Will the user be using a shared workstation/kiosk where especially important that a previous user's session not be assessable by a new user?
- At which college/district IDP did the user authenticate?
- If a user is logged into to multiple applications, does logging out of one application mean the user should be logged out of all applications? For example, if the user is logged into MyPath and Canvas, does logging out of MyPath also mean the user should be logged out of Canvas?
...