> Is there any other place where I need to specify URL so that CAS knows to > call it?
The URL that CAS calls is not configurable. It simply replays the referring URL of the service that contacted CAS for a service ticket. So if you enter your application through https://yourhost/myApp/app/home.jsp, it will attempt to contact that _exact_ URL at logout time. You should configure the scope of SingleSignOutFilter accordingly. Also, as I believe is mentioned in the Wiki document, that filter must be defined before all other CAS filters. You can confirm SingleSignOutFilter/SingleSignOutHttpSessionListener received the CAS logout request by looking for the following in your application logs, assuming you have org.jasig.cas set to DEBUG or lower: 2008-12-04 16:05:07,610 DEBUG [org.jasig.cas.client.session.SingleSignOutHttpSessionListener] Removing HttpSession: QXdhBMmvsm+0FuvJJ4p23A** Hope that helps, Marvin Addison Middleware Services Virginia Tech -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
