Shibboleth, Logging out of individual web applications with Shibboleth
Shibboleth's default logout behavior should prevent you from losing work if you log out of one service with information still in progress in another. Here's how it works.
One of Shibbolethâs major benefits for campus users is in reducing the number of times you have to enter your NetID and password. Signing in to Shibboleth means that you can be recognized by all of the services that accept its single sign-on credentials for you.
However, an equivalent single sign-off has the potential to create unintended consequences: If you log out of one system and that one logout disconnected all your Shibboleth sessions, you could lose unsaved work in other browser tabs.
In order to prevent that from happening, the campus standard behavior is to provide âsingle sign-in and multiple sign-out.â Logging out in one tab doesnât automatically close you out of the others, although in some cases you may be prompted for another login.
If youâve signed up for both Google Apps at Illinois and Box, you can see how it works as follows:
- In one browser tab, go to uofi.box.com.
(If youâre not already logged in, youâll have a Shibboleth prompt at this point.)
- In another tab of the same browser, go to docs.g.illinois.edu.
(Because you already logged in to Box in the same browser, Google Apps at Illinois will also recognize you, and will take you to your driveâs inbox.)
- In the Google Apps tab, start a new Google Doc
as a test file.
(Youâll now have three tabs open â one Box and two Google Apps.
- In the Box tab, click on your name, then select
(Box will show you a logged-out window with a login button. However, Google Apps and the test doc will still be open.)
- In either of the Google Apps tabs, click into a
different folder or make more edits to your Google Doc.
(Youâre still logged in and havenât lost access to your work.)
Sometimes you want to log out of all your sessions at the same time, especially if youâve been using a computer lab or another personâs computer.
If your browser isnât set to remember your sessions across browser restarts, then closing the web browser (all tabs and all windows) will log you out of all your sessions.
However, if your browser is set to remember your sessions across restarts, then youâll need to log out of each Shibboleth-authorized window separately.