I see "a cookie coming with a request" and I know the first thing that comes to my mind is SAML tokens, have you looked into that at all?
I would suggest taking a look at the FSS documentation and even if that is not the direction you are trying to…
What kind of cookie? You could do something with a custom auth scheme, but if you provide some addition details on the goal of what you are trying to accomplish there may be another route to go.
Todd
There are probably two things to look at:
1. Is the page cached? If so, add no-cahce headers.
2. Are you using basic or IWA auth? If so, it's likely you are getting automatically signed back in.
Todd
Hi All,
I have written a rule in Apache which expires the SMSESSION cookie but when i again hit a protected URL in the same browser then Siteminder doesnt ask me for authentication again
Any thoughts.
No. There is no way to do this. The easiest thing to do is to have the logoff page itself be dynamic. So, then you can pass in a parameter which indicates what the page should do after logging off the user.
Todd