dotnetopenauth - How to logout from Relying Party?

Question

I am using Dotnetopenid for login.

I am logs in my application by using dotnetopenid provider suppose google.

At the time of logout I am ending the my application user's session by FormsAuthentication.SignOut(); but if I am not closing the browser and logs in using google it will not ask me for id-password and land me on secured page of my apllication.

Also, if i will try gmail.com it will directly lands me user account without asking id-password.

So how could I logout completely from my application and google too ?

thanks in advance

Answer 1

I think you are mistaking the Relying Party and the OpenID Provider. Using StackOverflow as an example, SO is the Relying Party and other sites (e.g. Google) are the OpenID Provider(s).

The Relying Party (e.g. SO) has no say in when the OpenID Provider (e.g. Google) chooses to "forget" the user for their own purposes.

EDIT: I was not familiar with the PAPE extension. However, if I understand correctly, it does not provide a way for the RP to say to the OP, "On your end, forget this user's authentication", which is what I think rehan wants. It just provides a way for the RP to demand another authentication for the RP's purposes.

I still see no way for (e.g.) SO to log a Google user out of Gmail after SO logs them out.