November 2017
Intermediate to advanced
542 pages
14h 24m
English
One of the things that we failed to mention in our initial diagram of a single logout was how the logout is performed. Unfortunately, it is implemented by storing a mapping of the service ticket to HttpSession as an in-memory map. This means that a single logout will not work properly within a clustered environment:

Consider the following situation:
The CAS Server sends a logout request to the CAS service, ...
Read now
Unlock full access