"Log out" Does Not Unset Authentication

[ProfMatthewHz]

In having multiple students submit assignments from the same computer (e.g., prove they are in the room) we came across a bug/feature/known problem-type thing. After submitting, students will click on the menu item to log out and get taken back to the "Sign in" page. Rather than being forced to re-authenticate, clicking the sign in button just restarts with that student. My 442 students pointed this issue out to me having already adopted the obvious solution (closing the window). If this cannot be solved, perhaps we should have the logout button take users to a warning page stating they must close the window to complete the log out process?

[Searay-330]

this is most likely related to the shibb auth process i will take a look tonight

[daviddob]

This looks like it could be promising, however all other university systems behave the same way and just redirect to a "Warning Please Close Your Browser!" page. If we can convince the powers at be to grant shibb auth for our dev server so we can test in a non-prod manner I'll circle back around and see what I can come up with. Until then, we will have to follow the policy of closing your browser on logout.