| 2016-07-05 00:57:31 |
Aaron Wells |
description |
http://rhmoodle.elearning.catalyst.net.nz/ log in as the catalyst admin
Click on "Mahara Master Dev" under "Network servers". this will jump you to http://master.dev.mahara.org/, open this in another tab
go back to the moodle, and log out. You are not logged out of the mahara.
This is due to the kill_child method not being implemented, which is what the IdP calls when it is logged out from |
When Mahara is doing SSO via MNet, with a remote IdP, it ought to log you out of Mahara when you log out of the IdP. MNet allows for this via the "kill_children" API method, which the IdP will call for each connected service provider to tell it to log a user out.
Mahara never implemented this method, so it doesn't log you out properly when you log out of the IdP.
To replicate:
1. Set up MNet between a Moodle & Mahara site, with Moodle as the identity provider (i.e. users log in to Moodle and then roam over to Mahara)
2. Log in to Moodle
3. Roam over to Mahara
4. Open up Moodle in another tab.
5. Log out of Moodle.
6. Go back to the tab with Mahara and try to navigate around in the site.
Expected result: You can't navigate around because you're logged out of Mahara
Actual result: You are not logged out of Mahara |
|
| 2016-07-05 00:58:13 |
Aaron Wells |
description |
When Mahara is doing SSO via MNet, with a remote IdP, it ought to log you out of Mahara when you log out of the IdP. MNet allows for this via the "kill_children" API method, which the IdP will call for each connected service provider to tell it to log a user out.
Mahara never implemented this method, so it doesn't log you out properly when you log out of the IdP.
To replicate:
1. Set up MNet between a Moodle & Mahara site, with Moodle as the identity provider (i.e. users log in to Moodle and then roam over to Mahara)
2. Log in to Moodle
3. Roam over to Mahara
4. Open up Moodle in another tab.
5. Log out of Moodle.
6. Go back to the tab with Mahara and try to navigate around in the site.
Expected result: You can't navigate around because you're logged out of Mahara
Actual result: You are not logged out of Mahara |
When Mahara is doing SSO via MNet, with a remote IdP, it ought to log you out of Mahara when you log out of the IdP. MNet allows for this via the "kill_child" API method, which the IdP will call for each connected service provider to tell it to log a user out.
Mahara never implemented this method, so it doesn't log you out properly when you log out of the IdP.
To replicate:
1. Set up MNet between a Moodle & Mahara site, with Moodle as the identity provider (i.e. users log in to Moodle and then roam over to Mahara)
2. Log in to Moodle
3. Roam over to Mahara
4. Open up Moodle in another tab.
5. Log out of Moodle.
6. Go back to the tab with Mahara and try to navigate around in the site.
Expected result: You can't navigate around because you're logged out of Mahara
Actual result: You are not logged out of Mahara |
|
