You must log out from the Google Account you used to log in from your
app, otherwise you'll get logged in again (logout from your app works:
in fact, you're being logged in again with a new session): after all,
that's what single sign on is meant to do :-)

What you can do is deploy a servlet at /_ah/openid_logout which says
to your user "you logged out: logout from Google too" and provide the
logout link for Google Accounts (e.g. 
https://mail.google.com/mail/?logout&hl=en)
or Google Apps (https://mail.google.com/a/mydomain.com/?logout&hl=en-
GB).

AFAIK there's no other chance to do it: I can confirm Atlassian Jira
uses this approach to manage this use case (that's where I copied it
from, btw).

Regards
Lorenzo

On Dec 7, 3:31 pm, dflorey <daniel.flo...@gmail.com> wrote:
> Do you know any working app with a proper OpenID workflow where I can
> test if this really works?
> I want to achieve that a user can login to the app, logout and can
> login with a different account of the same domain (without being
> forced to clear the cache manually).
>
> On 6 Dez., 12:33, "l.denardo" <lorenzo.dena...@gmail.com> wrote:
>
> > Logout works *for your app*. This means that your user is logged out
> > from your app, but must explicitly log out from his Google Account.
> > If the user comes back to your app while still being logged in to
> > Google and you accept login without any intermediate step, he will be
> > logged in again in your application.
>
> > If he logged out from Google, or you provide an intermediate step
> > (e.g. your app login page asks if you want to login with Google
> > accounts or Google Apps) everything will work fine.
>
> > Regards
> > Lorenzo
>
> > On Dec 6, 10:17 am, dflorey <daniel.flo...@gmail.com> wrote:
>
> > > Hi,
> > > is logout currently supported with FederatedLogin on app engine?
> > > Is it possible to use the logout url and login afterwards with a
> > > different email on the same domain or will it automatically login with
> > > the previous email until I empty all cookies?
> > > I've read about this a while ago in the docs, but the note is gone so
> > > I'm wondering if this is now fixed.
>
> > > Thanks,
>
> > > Daniel

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to google-appeng...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to