[Architecture] Support FIDP initiated logout with new identity framework

2018-02-06 Thread Kanapriya Kuleswararajan
Hi All, For the POC [1], I have registered a new servlet in identity-outbound-auth-samlsso authenticator and try out the FIDP initiated logout flow by removing the session id which is associated with the earlier login. Now I have tried to move the POC [1] code to support with the new identity fr

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-02-06 Thread Hasintha Indrajee
According to the analysis, it seems like logout requests from SPs and logout requests from IDPs look similar. @Kanapriya, were you able to skim through specs and see whether there are differences ?. Also on the other hand when we have a look towards our new framework, this looks more like an inbou

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-02-06 Thread Johann Nallathamby
It is in fact an inbound connector. So +1 to use the inbound framework and write a InboundProcessor to process this request. This way we can have an abstract FederatedIdPInitiatedLogoutProcessor (you may come up with a different name) that will handle the logout specific logic in authentication fra

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-02-06 Thread Kanapriya Kuleswararajan
Hi Hasintha! On Tue, Feb 6, 2018 at 11:47 PM, Hasintha Indrajee wrote: > According to the analysis, it seems like logout requests from SPs and > logout requests from IDPs look similar. @Kanapriya, were you able to skim > through specs and see whether there are differences ?. > > Yes , went thro

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-02-07 Thread Malithi Edirisinghe
On Wed, Feb 7, 2018 at 2:32 AM, Johann Nallathamby wrote: > It is in fact an inbound connector. So +1 to use the inbound framework and > write a InboundProcessor to process this request. This way we can have an > abstract FederatedIdPInitiatedLogoutProcessor (you may come up with a > different na

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-02-07 Thread Johann Nallathamby
On Wed, Feb 7, 2018 at 2:33 PM, Malithi Edirisinghe wrote: > > > On Wed, Feb 7, 2018 at 2:32 AM, Johann Nallathamby > wrote: > >> It is in fact an inbound connector. So +1 to use the inbound framework >> and write a InboundProcessor to process this request. This way we can have >> an abstract Fe

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-02-07 Thread Kanapriya Kuleswararajan
Hi All, For the moment, as per the off-line discussion with Malithi and Johann, I have tried to move the code to *identity-outbound-auth-samlsso* to make this feature compatible with new identity framework. But I have get the code [1] (without adding the changes related to this feature) and repl

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-02-07 Thread Dimuthu Leelarathne
Hi Darshana, Would the core IS team provide a method for this (terminate framework level session) functionality? thanks, Dimuthu On Wed, Feb 7, 2018 at 2:33 PM, Malithi Edirisinghe wrote: > > > On Wed, Feb 7, 2018 at 2:32 AM, Johann Nallathamby > wrote: > >> It is in fact an inbound connecto

Re: [Architecture] Support FIDP initiated logout with new identity framework

2018-04-18 Thread Roman CHRENKO
: Malithi Edirisinghe ; Darshana Jayasinghe Cc: architecture Subject: Re: [Architecture] Support FIDP initiated logout with new identity framework Hi Darshana, Would the core IS team provide a method for this (terminate framework level session) functionality? thanks, Dimuthu On Wed, Feb 7, 2018 at