Logout doesn't seem to really log the user out.

[kerchner]

When logged in, I use the Log out link in the upper right (dropdown under the user name). This takes me to https://scholarspace.library.gwu.edu/logout . I then return to the scholarspace page and there's no user in the upper right, but clicking the staff login link brings me directly to the dashboard where I see that I'm actually logged in.

[kilahimm]

@kerchner I think this is a combination of a bug and an expected shibboleth behavior. The bug I think is the /logout isn't handing off to /Shibboleth.sso/Logout path correctly. The bypassing login and going straight to the dashboard is because shibboleth sessions aren't 100% destroyed until you've both logged out and closed the browser.

[kerchner]

@kilahimm notes that this may be a prod deployment issue, as it is currently not occurring in the (prod-like) test environment. May be resolved by new prod deployment. Also, this issue only affects logged-in users, which would currently only include library staff. Removing from v1.1.0.