Portlet 2.0 spec PLT.18.4 (and for that matter the whole of the Portlet spec) *only* talks about the *Portlet* application, not the *Portal*
application.
This means, the portlet *container* is required to invalidate the servlet (application) session when the portlet session is invalidated, and
Here is a previous thread on this topic which includes some links as to
how uPortal deals with this issue:
http://old.nabble.com/Invalidating-all-portlet-sessions-td18386578.html
-Eric
Brett Randall wrote:
Yes Ate is correct, and also here's a couple of likely links to
Jetspeed and Liferay
