Hacker News new | ask | show | jobs
by i2shar 2518 days ago
What's the best practice on when a user session is destroyed at the SP's end? After receiving the LogoutResponse from IdP or before sending the LogoutRequest to IdP?