How to implement the logout on server and client ?

[Dahkenangnon]

How to implement the logout on server and client ?

[ankur-anand]

Hi @Dahkenangnon,

There are various ways this can be done. But first as there would be potentially many active application sessions during a SSO-Session, So there need to be clear distinction between scope of the logout.

1. Just end the current application session
2. End all application session.

First application scenario should not have effect on any other application or global sso server, so that can be simple invalidating the cookies or token of that application.

But in second scenario you will need some kind of mechanism that can notify each of the active application to end session for particular user from global sso server. This can be achieved using the some broker or webhook mechanism.