How to do an isAuthenticated() without using POST? about php-saml HOT 4 CLOSED

The isAuthenticated method of SimpleSAMLphp allows to check if there is an active session on the simpleSAMLphp SP side.

This toolkit does not has a state/session. After validate the SAMLResponse you extract the user data and you decide what to do with it, you can open a session on PHP and then all you need to do to check if the user is authenticated is to check for such active session.

from php-saml.

Is there any way that if I log out from an external SP, when I log in to this SP with OneLogin I can check if there is a session in the SSO and thus clear all session variables?

from php-saml.

Why dont you implement Single Logout at your PHP app so if the user close the session at the IdP or at another SP with SLO, the session is also removed from the PHP app?

from php-saml.

Understood @pitbulk, thank you very much!

from php-saml.