[ https://jira.jboss.org/jira/browse/GTNPORTAL-996?page=com.atlassian.jira.... ] Marek Posolda commented on GTNPORTAL-996: ----------------------------------------- Same issue is for OpenSSO. After logout from GateIn is opensso cookie "iplanetDirectoryPro" still in browser so I am not able to login as different user without manual removation of this cookie. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/GTNPORTAL-996?page=com.atlassian.jira.... ] Sohil Shah commented on GTNPORTAL-996: -------------------------------------- Usage Instructions: For JOSSO: Add the following to portal.war/WEB-INF/web.xml <filter> <filter-name>JOSSOLogoutFilter</filter-name> <filter-class>org.gatein.sso.agent.filter.JOSSOLogoutFilter</filter-class> <init-param> <!-- This should point to your JOSSO authentication server --> <param-name>LOGOUT_URL</param-name> <param-value>http://localhost:8888/josso/signon/logout.do</param-value> </init-param> </filter> <filter-mapping> <filter-name>JOSSOLogoutFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> For OpenSSO: Add the following to portal.war/WEB-INF/web.xml <filter> <filter-name>OpenSSOLogoutFilter</filter-name> <filter-class>org.gatein.sso.agent.filter.OpenSSOLogoutFilter</filter-class> <init-param> <!-- This should point to your OpenSSO authentication server --> <param-name>LOGOUT_URL</param-name> <param-value>http://localhost:8888/opensso/UI/Logout</param-value> </init-param> </filter> <filter-mapping> <filter-name>OpenSSOLogoutFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> For CAS: Nothing -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

[ https://jira.jboss.org/jira/browse/GTNPORTAL-996?page=com.atlassian.jira.... ] Sohil Shah resolved GTNPORTAL-996. ---------------------------------- Resolution: Done CAS is fixed. Note: CAS logout screen does not support an auto redirect back. Instead it provides a parameterized link on the logout screen. The user has to click on that link to get back to their original web app. (they frown upon this practice, but this looks like the middle ground). This is not a CAS bug. Its by design. They argue that when you Logout you should really close out your browser for security reasons. Because if you logout of one site, it does not necessarily mean you are logged out from other sites. So someone can go into browser history and gain access to your account on other sites that are part of the SSO network. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira