Neha,
Our wordpress uses disk based sessions, a file like 'sess_ST-...'. Logout is
performed by deleting these files. I do not see where this file is created in
the code. I suspect that it might be part of phpCAS but I have not worked with
its session options much.
Maybe there are phpCAS
Hello Ray,
Thanks a lot for reply.
Yes i am able to access the logoutUrl without being logged-in.
May be we wait for the wordpress expert and his advice as to what can be
done.
Wish you a nice day ahead.
Regards
Neha Gupta
On Friday, August 3, 2018 at 8:58:08 PM UTC+2, rbon wrote:
>
> Neha,
Neha,
Is it possible that LogoutUrl is protected by CAS? (That is, can you access
LogoutUrl without being logged in?)
Our word press expert is away until at least Tuesday so I will ask how logout
is set up then.
Ray
On Fri, 2018-08-03 at 02:22 -0700, Neha Gupta wrote:
Hello Ray,
Thanks for
Hello Ray,
Thanks for the update.
I have already configured "LogoutUrl" in the service registry but the
problem is that in response i am receiving 302 error with the other URL in
the "Location" header.
When i fire the same logout URL from a new tab then i got logged out from
the wordpress
Neha,
By default CAS will send the logout to the URL that was used for login. If
Wordpress has a different URL, you can set that in the service definition,
https://apereo.github.io/cas/5.3.x/installation/Logout-Single-Signout.html#slo-requests
Ray
On Thu, 2018-08-02 at 02:52 -0700, Neha Gupta
Hello Ray,
Issue is solved with the ASP application. Now when /cas/logout is called
from a new tab, ASP application is also getting logged out. The reason is
certificate as stated by you and some configuration in web.config of ASP
application. After activating debug traces for
