IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  sign out from CIC

    Posted 06/19/19 09:55 AM
    Hi,
    We federate CIC to on-prem ISAM for authentication.
    When I hit "logout" in CIC, the SAML token from ISAM is still valid and I can login to CIC again with that token.
    Is there a way in CIC to call /sps/hqvSaml/saml20/slo on the IdP or /pkmslogout when I click the "sign out" button in CIC?

    ------------------------------
    Michael Ohgami
    ------------------------------


  • 2.  RE: sign out from CIC

    Posted 07/02/19 11:54 AM
    We currently don't support SLO for Cloud Identity to the underlying IdP. This was originally by design as some of our ISAM customers still have federations that are on that underlying IdP and logging out of CI shouldn't affect those sessions. However, we are considering this for future implementation. In order to best track this type of request, could you put in a request here: Submission portal for Cloud Identity Offerings
    Aha remove preview
    Submission portal for Cloud Identity Offerings
    Use this form to submit an idea for a new product feature. Our product development team will review your input and provide status updates as decisions are made regarding the request. Note - Use this form to submit idea if you have some confidential information to share.
    View this on Aha >


    ------------------------------
    Adam Case
    ------------------------------



  • 3.  RE: sign out from CIC

    Posted 07/02/19 12:12 PM

    Thanks Adam,

    It would be nice to have the option at least.

    I'll submit a request.

     

     

    /michael

     

     

     



    ------Original Message------

    We currently don't support SLO for Cloud Identity to the underlying IdP. This was originally by design as some of our ISAM customers still have federations that are on that underlying IdP and logging out of CI shouldn't affect those sessions. However, we are considering this for future implementation. In order to best track this type of request, could you put in a request here: Submission portal for Cloud Identity Offerings
    Aha remove preview
    Submission portal for Cloud Identity Offerings
    Use this form to submit an idea for a new product feature. Our product development team will review your input and provide status updates as decisions are made regarding the request. Note - Use this form to submit idea if you have some confidential information to share.
    View this on Aha >


    ------------------------------
    Adam Case
    ------------------------------


Related Content