<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Do not FYI me<br> <BR><div><hr id="stopSpelling">From: Michael.Jones@microsoft.com<br>To: board@openid.net<br>Date: Thu, 10 Sep 2015 06:57:14 +0000<br>Subject: [OpenID board] FW: OpenID Connect Back-Channel Logout Specification<br><br>
<style><!--
.ExternalClass p.ecxMsoNormal, .ExternalClass li.ecxMsoNormal, .ExternalClass div.ecxMsoNormal {
font-size:11.0pt;
font-family:"Calibri","sans-serif";
}
.ExternalClass a:link, .ExternalClass span.ecxMsoHyperlink {
color:blue;
text-decoration:underline;
}
.ExternalClass span.ecxMsoHyperlinkFollowed {
color:purple;
text-decoration:underline;
}
.ExternalClass span.ecxEmailStyle17 {
font-family:"Calibri","sans-serif";
color:windowtext;
}
.ExternalClass span.ecxEmailStyle18 {
font-family:"Calibri","sans-serif";
color:#1F497D;
}
.ExternalClass .ecxMsoChpDefault {
font-size:10.0pt;
}
.ExternalClass div.ecxWordSection1 {
}
--></style>
<div class="ecxWordSection1">
<p class="ecxMsoNormal"><span style="color: rgb(31, 73, 125);">FYI</span></p>
<p class="ecxMsoNormal"><span style="color: rgb(31, 73, 125);"> </span></p>
<div>
<div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentColor currentColor; padding: 3pt 0in 0in;">
<p class="ecxMsoNormal"><b><span style='font-family: "Tahoma","sans-serif"; font-size: 10pt;'>From:</span></b><span style='font-family: "Tahoma","sans-serif"; font-size: 10pt;'> Mike Jones
<br>
<b>Sent:</b> Wednesday, September 09, 2015 11:54 PM<br>
<b>To:</b> specs@lists.openid.net; 'general@lists.openid.net'<br>
<b>Subject:</b> OpenID Connect Back-Channel Logout Specification</span></p>
</div>
</div>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">A new back-channel OpenID Connect Logout spec has been published at
<a href="http://openid.net/specs/openid-connect-backchannel-1_0.html" target="_blank">http://openid.net/specs/openid-connect-backchannel-1_0.html</a>. This can coexist with or be used instead of the front-channel-based
<a href="http://openid.net/specs/openid-connect-session-1_0.html" target="_blank">Session Management</a> and
<a href="http://openid.net/specs/openid-connect-logout-1_0.html" target="_blank">HTTP-Based Logout</a> specifications.</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">The abstract for the new specification states:</p>
<p class="ecxMsoNormal"><i>This specification defines a logout mechanism that uses back-channel communication between the OP and RPs being logged out; this differs from front-channel logout mechanisms, which communicate logout requests
from the OP to RPs via the User Agent.</i></p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">This completes publication of the three planned OpenID Connect logout mechanisms: two that communicate on the front-channel through the User Agent (browser) and this one that communicates on the back-channel, without involving the User
Agent. See <a href="http://openid.net/specs/openid-connect-backchannel-1_0-00.html#Introduction" target="_blank">
the Introduction</a> for a discussion of the upsides and downsides of the different logout approaches. As much as we'd like there to be a single logout solution, both experience and extensive discussions led us to the conclusion that there isn't a feasible
one-size-fits-all approach.</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">Reviews of the new (and existing!) specifications are welcomed.</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">Thanks to John Bradley, Pedro Felix, Nat Sakimura, Brian Campbell, and Todd Lainhart for their contributions to the creation of the specification.</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal"> -- Mike</p>
<p class="ecxMsoNormal"> </p>
<p class="ecxMsoNormal">P.S. This note was also published at <a href="http://self-issued.info/?p=1452" target="_blank">
http://self-issued.info/?p=1452</a> and as <a href="https://twitter.com/selfissued" target="_blank">
@selfissued</a>.</p>
</div>
<br>_______________________________________________
board mailing list
board@lists.openid.net
http://lists.openid.net/mailman/listinfo/openid-board</div> </div></body>
</html>