SA-10583

Summary

When logging off from the application and choosing the return to PRPC button, the user is logged back in without re-entering credentials. 

Error Messages

Not Applicable

Steps to Reproduce

1. Log in to PRPC 6.2 through single sign-on (SSO).
2. Click the log-off link.
3. Click the link to return.

Root Cause

The root cause of this problem is a defect in custom application code or rules. Web-Session-Return HTML stream was overridden with custom code. In order to log off completely from a custom SSO solution, redirect to the SSO log-off page on logout and Web-Session-Return.

Resolution

Update the Web-Session-Return stream to refer directly to the SSO log-off page using a meta tag.
For example: <META http-equiv="refresh" content="0;URL=https://smlogin/your_SSOsolution/ssologout/Logout.html" />