0

For our MVC Application we use Thinktecture Identity Server for our claims. Everything works expected but some time randomly when we logout the logout is not happening and still the session is there.

When we click logout, it take to the home page(as expected) But after we click login (it suppose to redirect to logging page where we give user credentials) but it goes to the logged in user page. It looks like the logout hasn't happen properly. But this is not consistent it happens randomly in rare case.

Any input will be highly appreciated.

Our logout code is 

public ActionResult Logout()
    {
        var fam = FederatedAuthentication.WSFederationAuthenticationModule;
        FederatedAuthentication.SessionAuthenticationModule.DeleteSessionTokenCookie();

        fam.SignOut(false);

        var signOutRequestMessage = new SignOutRequestMessage(new Uri(fam.Issuer), fam.Realm);
        ViewBag.SignOutUrl = signOutRequestMessage.WriteQueryString();

        return View();
    }
Badri Prasad
  • 107
  • 1
  • 1
  • 9
  • Any one have any comments to this question? – Badri Prasad Sep 01 '14 at 10:59
  • In those cases where the user is not being properly logged out: 1. Does your identity server still show a cookie for the relying party? 2. Does the relying party still show a session cookie (that would have been generated as part of the login procedure)? – CaPorter Nov 05 '14 at 00:41

0 Answers0