Logout in Single Sign-on Systems - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2013

Logout in Single Sign-on Systems

Résumé

Single sign-on (SSO) helps users to cope with many online services that require authentication. Systems such as OpenID and SAML-based Shibboleth offer federated identity management where an Identity Provider authenticates the user on behalf of the services. Much research concentrates on making authentication stronger, preventing phishing and making the systems more user friendly but less attention has been paid to the termination of the authentication sessions i.e. logout. It is, however, equally important that the sessions do not remain open when, for example, a student using shared computers in a university library leaves the workstation. In this article, we describe challenges related to logout in federated identity management on web based services and give guidelines for implementing reliable logout from services that use single sign-on.
Fichier principal
Vignette du fichier
978-3-642-37282-7_14_Chapter.pdf (134.93 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01470498 , version 1 (17-02-2017)

Licence

Paternité

Identifiants

Citer

Sanna Suoranta, Asko Tontti, Joonas Ruuskanen, Tuomas Aura. Logout in Single Sign-on Systems. 3rd Policies and Research in Identity Management (IDMAN), Apr 2013, London, United Kingdom. pp.147-160, ⟨10.1007/978-3-642-37282-7_14⟩. ⟨hal-01470498⟩
163 Consultations
2303 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More