We have an Extranet SharePoint environment published in Internet for our clients. The issue is that if the user is using the Chrome browser and even if they select "Sign Out" or just close the browser, their session remains still open and the next person to visit that site is logged in with the previous user's credentials. Many of our users will be logging onto this SharePoint site from public computers so this is a huge security risk. Is there any solution for this?
2 Answers
You can try Sign in as Different User option. If you are creating custom sign out button then you can bind url as _/layouts/closeconnection.aspx?loginasanotheruser=true
Note : This might approach may ask for credentials again but your user would be definitely logged out from the extranet site
Reference : Sign in as different user
This is likely caused by the following which can be found within Chrome Settings under the “On Startup” heading:
“Continue where I left off” is probably selected.
If you switch it to “Open the new tab page” that will likely solve your issue.
Alternatively, you could take the following steps as recommended on the Google help page describing this setting:
Your cookies and data are saved, so any websites you were logged into before (like Gmail, for example) will open again. If you don't want to be automatically signed in to these pages, follow the steps below:
- On your computer, open Chrome.
- At the top right, click More->Settings.
- At the bottom, click Advanced.
- Under "Privacy and security," click Content settings.
- Click Cookies.
- Turn on Keep local data only until you quit your browser.