{"action":"closed","issue":{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/46","labels_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/46/labels{/name}","comments_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/46/comments","events_url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/issues/46/events","html_url":"https://github.com/pingidentity/mod_auth_openidc/issues/46","id":54875805,"number":46,"title":"Support for Single Sign Out","user":{"login":"karuatcsg","id":2369459,"avatar_url":"https://avatars.githubusercontent.com/u/2369459?v=3","gravatar_id":"","url":"https://api.github.com/users/karuatcsg","html_url":"https://github.com/karuatcsg","followers_url":"https://api.github.com/users/karuatcsg/followers","following_url":"https://api.github.com/users/karuatcsg/following{/other_user}","gists_url":"https://api.github.com/users/karuatcsg/gists{/gist_id}","starred_url":"https://api.github.com/users/karuatcsg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/karuatcsg/subscriptions","organizations_url":"https://api.github.com/users/karuatcsg/orgs","repos_url":"https://api.github.com/users/karuatcsg/repos","events_url":"https://api.github.com/users/karuatcsg/events{/privacy}","received_events_url":"https://api.github.com/users/karuatcsg/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/pingidentity/mod_auth_openidc/labels/question","name":"question","color":"cc317c"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-01-20T12:10:57Z","updated_at":"2015-01-21T06:45:36Z","closed_at":"2015-01-21T06:45:36Z","body":"We set up an OAuth/OpenID Connect server and our application authenticates users against the OAuth/OpenID Connect server. We have an Apache web server that uses mod_auth_openidc and that Apache web server serves the content to authenticated users of our application.\r\n\r\nWhen a user signs off/out from the application, we want the Apache server to stop serving the content. However mod_auth_openidc cookie on the user browser is valid even after revoking the access tokens on the OAuth/OpenID connect server. Is there a way for mod_auth_openidc to support \"federated sign out\" or \"single sing out\"? Any guidance is appreciated.\r\n\r\nBy the way we use\r\n\r\n`OIDCProviderMetadataURL http://svr-IP/openid-connect-server/.well-known/openid-configuration`\r\n\r\nin our Apache configuration.\r\n\r\nthanks,\r\nKarunakar"}}