We have two web applications of which one is configured with adfs and it is working fine but the problem is with sign out. When user clicks on sign out it is still staying in the site. Since we have configured adfs for two web apps i cannot modify the welcome .ascx in /_layouts . Is there a way I can make the users sign out from the site .
Add a comment
|
1 Answer
I'm not sure you can do that with SharePoint. You will have a "claim" from ADFS that will allow you to get into both your web applications. When you sign out of SharePoint, ADFS doesn't know that (unless you modify the sign out form to pass you over to ADFS sign out).
So when you access the web app again - you simply pass the token you already have.
You could potentially create a custom solution only for the web app in question which overrides the default signout behavior and redirects user to the ADFS logout page which will remove the cookies/tokens (thus granting you a true sing out).
Also keep in mind depending on how you have things configured with ADFS/SharePoint and the browsers - you may still experience something that looks like you never signed out, but in reality your browser is just resending the NTLM token to ADFS and logging you on automatically.
-
Thanks Jesus Shelby but does modifying some thing on welcome.ascx in _/layouts works in my scenario? or it is necessary that i should go for custom logout solution? Commented May 29, 2015 at 14:54
-
That would affect both your web applications as it's a shared file. It's certainly the easiest route. Probably low risk - if the other web application is used internally and they don't use the "sign out" link. Commented May 29, 2015 at 15:04
-
yes it would affect both web apps, for one web app we have just normal ad users and adfs users who should sign out for other web app we have business partners who log in to the site as well so it would affect if i do it through welcome.ascx, so the only thing is to implement custom sign out it that right? Commented May 29, 2015 at 15:15
-
Hi Shelby do you have any links or web sites or any snippets to follow and guide through to set up custom sign out for single web app thanks in advance Commented May 29, 2015 at 18:20
-
I don't have any "example" solutions, but start here: social.technet.microsoft.com/wiki/contents/articles/… Commented May 29, 2015 at 21:12