Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author gpspake

    (@gpspake)

    @alexanoid1, yeah. If you log out of WordPress, it logs you out of CAS.
    logout method is here
    that method is hooked in to wp_logout here

    (Sidenote: The “needs work” in the comments there just refers to the logout with redirect option that I was having some trouble with so nothing to worry about there. By default, you will still be logged out of CAS any time you log out of WordPress.)

    Thread Starter alexanoid1

    (@alexanoid1)

    @gpspake thanks for your answer but I mean another CAS feature –

    https://jasig.github.io/cas/4.1.x/installation/Logout-Single-Signout.html

    When a CAS session ends, it notifies each of the services that the SSO session is no longer valid, and that relying parties need to invalidate their own session.

    This can happen in two ways: ….

    In other words – I can log out directly on CAS server and CAS server will notify each of the services via for example HTTP POST message that logout happened. You have to implement a hook in your WP plugin in order to handle these messages and invalidate WP session also.

    Plugin Author gpspake

    (@gpspake)

    Hey @alexanoid, sorry for misunderstanding (also for the delay; I’m not getting email notifications for some reason. I’ll make sure to look in to that)

    I’ll admit, I’m not familiar with that feature but I’ll talk to our cas server admin to see if he is. If it’s something simple, I’d be glad to add it.

    The project is also on github if you’d like to submit a PR directly: https://github.com/uthsc/UTHSC-WPCAS

    Thread Starter alexanoid1

    (@alexanoid1)

    Hi @gpspake, thanks for your response! It was my mistake, everything with SLO works perfect with your awesome plugin. No any changes needed. Thanks again !

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘CAS server Single Logout(SLO) handler’ is closed to new replies.