These docs are for v20.3.44. Click to read the latest docs for v20.3.186.

Discussions

Ask a Question
Back to All

SSO Procedure Questions

I've got the new SSO process working, in that I can pass someone to our iMIS site and get them back to the external site with valid tokens, but I have two questions about this process that I can't find information on or get working:

  1. Is there a way to get the oauth2 "state" variable back from iMIS? I need this to verify that a request originated from the external site and to help track the login to send them back to original page they were trying to access. I am passing it to iMIS, but not getting it back.

  2. Is there a way to log a user out of the iMIS site, or a URL I can redirect them to that will log them out? I can destroy the session on the external site which logs them out of the external site, but they could still be logged in to the iMIS site. This is an issue for us because several of our members use shared computers. We need to be able to log them out of everywhere we asked them to log in to in order to ensure the next user doesn't start a session with the previous user's information.

Thanks!