CAS is NOT a session manager

Application session is the responsibility of the application.


Referred from 
https://apereo.github.io/cas/5.2.x/installation/Logout-Single-Signout.html 
<https://apereo.github.io/cas/5.1.x/installation/Logout-Single-Signout.html>
. 


Lets say i have multiple applications with valid sessions generated via CAS 
single sign in .

I want to invalidate all the sessions with logout of one application . 


Is it possible . 


I have tried and successfully destroyed the Single sign on after the logout 
. 

But, the application which already have sessions are still able to use the 
same session . 


Thank you in advance  


Client side grails spring security config :

grails.plugin.springsecurity.cas.active = true
grails.plugin.springsecurity.cas.loginUri = "/login"
grails.plugin.springsecurity.cas.serviceUrl = "${application.url}/login/cas"
grails.plugin.springsecurity.cas.serverUrlPrefix = "${cas.url}"
grails.plugin.springsecurity.cas.filterProcessesUrl = '/login/cas'
grails.plugin.springsecurity.cas.useSingleSignout = true
grails.plugin.springsecurity.logout.afterLogoutUrl = 
"${cas.url}/logout?service=${application.url}/login/cas"



Cas.properties : 

cas.logout.followServiceRedirects=true
cas.logout.redirectParameter=service
cas.logout.confirmLogout=true
cas.slo.disabled=true
cas.slo.asynchronous=true



-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/fcf0e7bd-b4d8-4144-8649-539f26c32a01%40apereo.org.

Reply via email to