Single sign-on

Web single sign-on (SSO) is a session / user authentication method that allows a person to provide credentials once in order to access multiple web applications.  Once you successfully authenticate to a web application via SSO, you will not need to provide credentials again until the session has timed out or you explicitly log out.  Note that SSO does not span browsers or devices.  I.e. if you login with SSO on your phone, this will not establish an SSO session on your laptop.

Single sign-out

Just as logging in to any SSO-enabled web application allows you to access any other SSO-enabled app without re-entering your credentials, logging out of one ends your ability to access other apps. However, logging out will not end your sessions in any other apps you have open in your browser.

As an example, if you log in to My Lafayette, then go to Webmail in a separate tab, and then log out of Webmail, your My Lafayette session will still be active. But if you go to Moodle, you will be prompted to enter your credentials again. You can single sign-out of applications by either logging out of an SSO-enabled web app, by quitting your browser, or by browsing to the https://cas.lafayette.edu/cas/logout URL.

When single sign-out won’t work

There are certain browser settings that cause single sign-on to behave unexpectedly. These settings hold on to a browser’s previous session and cause SSO to become confused. When this happens, quitting your browser may not allow you to log out. Disabling this feature in your browser fixes the problem.

Firefox

  • Go to Preferences > General.
  • Set “When Firefox starts” to “Show a blank page” or “Show my home page”. Do not use “Show my windows and tabs from last time”.

Chrome

  • Go to Preferences.
  • Set “On startup” to “Open New Tab page”. Do not use “Continue where I left off”
Tagged in: