JBoss SSO is not invalidating all sessions tied to an SSO cookie upon logout or invalidation
Issue
- We use JBoss single sign on. When we call
request.logout(), the application sessions tied to that SSO entry are not invalidated like we would expect. - We use unclustered SingleSignOn with a
<distributable/>application. When we callsession.invalidate()orrequest.logout()on an application session, all other application sessions tied to that corresponding SSO entry are not invalidated like we would expect.
Environment
- JBoss Enterprise Application Platform (EAP)
- 6.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
