I have a specific question about security.
Following problem occurs in my apps.
I have different webapps running. Soome not even on the same machine. Each having its one Application pool.
I do have one Authentication Service running which acts as a single signon tool.
ADFS, Active Directory Federation Service. This tool also keeps trac on which apps the user is currently logged on to.
The purpose of logging of is to remove/clear all Session in all web-apps and to logoff from the ADFS.
So far so good.
However when a user tries to log-off from one of the web-apps. He/She gets logged off, but the session is not cleared...
protected void Application_BeginRequest(object sender, EventArgs e)
{
LogService.Logger.Warn("Application BeginRequest: " + HttpContext.Current.Request.Url);
if (HttpContext.Current == null) return;
if (HttpContext.C ...
Go to the complete details ...