Single Sign Out

[shibu]

I have done External SSO as described in following link :

http://docs.alfresco.com/4.2/index.jsp?topic=%2Fcom.alfresco.enterprise.doc%2Ftasks%2Fauth-alfrescoe...

Configured Alfresco to accept a user name from an HTTP header.
Now, when the user clicks the link http://localhost:8080/share/page?SsoUserHeader=admin from MyWebApp, a filter will add the new header and the dashboard of that particular user will load in the browser.

<strong>Requirement :</strong>

Now I need to implement Single sign out also. When the user logging out from my MyWebApp, he should logged out from alfresco also.
I know that If I load http://localhost:8080/share/page/dologout in the browser, the user will be logged out.
But, I don't want to open a new tab in browser for loading the above URL for log out from alfresco.
If the user logged out from MyWebApp, the next attempts to use alfresco should ask for username and password.
How can I do this?

[kaynezhang]

Maybe you can write a webscript and deploy into share,and which  call sitedata.logout() method to logout
When you  log out from MyWebApp  call the  webscript to logout from share

[shibu]

Thanks for your answer. I wil try oy out.

[idwright]

I'm not sure that http://localhost:8080/share/page/dologout will log you out as you may still be signed in to your single sign on system.

You've got two problems here - first logging out from Alfresco/Share and from the single sign on system.

I got Share to logout from both (for CAS) by overriding the logout controller - essentially replace org.alfresco.web.site.servlet.SlingshotLogoutController

More details here http://tech.wrighting.org/2011/11/08/share-cas-logout

Then you need the MyWebApp logout to leave the SSO, and the SSO system to tell your Alfresco authentication system to log out.

If you are using CAS and mod_auth_cas you could try CASSSOEnabled On (experimental) or a short(ish) time out to make mod_auth_cas revalidate (as it caches the credentials)
(Be aware that if you are using CAS there are changes planned for v4 which should be out fairly soon)