Persistent logon?

[mlewis73]

When users in our new Canvas instance logoff, they get the warning message to close the browser. But if they don't close the browser, hitting the browser's back button takes them straight back into Canvas as though they had never left. This creates potential problems in public areas like labs and libraries. We use SAML and ADFS.

Canvas says its not their problem, that it is related to our authentication process.Has anyone run into this? If so, what did you do?

Thanks,

Mark

[Chris_Hofer]

 @mlewis73 ​... I don't have an answer for you, but would it be ok with you if I moved this question over to the Canvas Admins group?  You might get some more feedback over there vs. in the "Find Answers" area.

[mlewis73]

Chris,

Sure – please go ahead and move it the admins group.

Thanks,

Mark

Mark D. Lewis, Ed.D.

Director of Instructional Technology

Hillsborough Community College

Collaboration Studio

mlewis73@hccfl.edu<mailto:mlewis73@hccfl.edu>

813.253.7017

[cms_hickss]

We have a cookie killer script that's basically a javascript on the logout button that kills the cookie tied to the user's session.

[cms_hickss]

I'm going to respond here with how the cookie killer script works incase in the future someone else has this issue.

We're running Shibboleth. We setup an intermediary page (which no one sees) where the script lives. On logout "Authentication Settings" we set up a logout URL. This page really contains one line of code and then a tad of text incase for some reason it is seen before the window location is executed.

The script basically tells the session that it expired back in 1970 (it nulls the session with an expiration date of Thu, 01-Jan-1970 00:00:01 GMT). One cookie killed.

Hope this helps.

[kmeeusen]

Nice, Susan!

Thank you!

[Robbie_Grant]

 @mlewis73 ,

We are giving the Canvas Admins area a little bit of love (especially questions that are really, really old) and just want to check in with you.  This will also bring this question new attention. 

Were you able to find an answer to your question? I am going to go ahead and mark this question as answered because there hasn't been any more activity in a while so I assume that you have the information that you need. If you still have a question about this or if you have information that you would like to share with the community, by all means, please do come back and leave a comment.  Also, if this question has been answered by one of the previous replies, please feel free to mark that answer as correct.

Robbie