SAML2 logout from SP

Question

Hello All
I would like to initiate the logout request from SP. I have called the following statement in the SP logout page
weblogic.servlet.security.ServletAuthentication.logout(request);
weblogic.servlet.security.ServletAuthentication.invalidateAll(request);
weblogic.servlet.security.ServletAuthentication.killCookie(request);
But still it seems that it is not working.
1. Called the secured resource in the SP . which redirects me to IDP site in order to enter login id and password.
2. once the IDP authenticated the request , it redirects me to the SP resource (which i have requested originally)
So far so Good.
3.I am calling the logout page in the SP.
4. now , I am trying to call the resource which i have called in step 1.
My expectation would be that it will again redirect me to IDP to enter the credentials.
But , It is not .it directly take me to the requested resource.
please advise how can i achieve the logout from SP.
looking forward for all your assistance
Thanks.
If I am calling the secured resources again,it directly went to the requested resource without redirecting to
Edited by: ravi_orcl on Sep 3, 2012 4:14 AM

Answer 1

Hello All
According to their document , I think this is the behaviour it is meant to be.
[ http://docs.oracle.com/cd/E23943_01/web.1111/e13707/saml.htm|  http://docs.oracle.com/cd/E23943_01/web.1111/e13707/saml.htm]
Please refer the below comment from the above link
Note that the Force Authentication attribute has no effect because SAML logout is not supported in WebLogic Server. So even if the user is already authenticated at the Identity Provider site and Force Authentication is enabled, the user is not forced to authenticate again at the Identity Provider site.+
Still if anyone knew the workaround to make the force authentication to ask the user to enter the credentials again . please let me know.
Thanks.