Hi,
We are having a logout problem with our ADFS proxy server. We redirect to the wa=wsignoutcleanup1.0 and we see:
- Redirected to the proxy
- Redirected to the logout page and it confirms we are logged out
- All ADFS cookies are all deleted
If we navigate to the site again or hit the back button we are:
- Redirected to the proxy
- Redirected to the organization's site
- New cookies are reissued
- We are redirected back to the site and automatically logged in
How can we stop this? When the user logs out we need them to be logged out. Next time they visit the site they need to be authenticated. This is a huge security hole for us.
Thank you,
Richard