Symantec Access Management

Hello,

Is there a solution to delete the siteminder cookie at user logoff ?

Best regards,

Ludo.

Ludo,

it get set to "LOGGED OFF" and thus would not be usable.

what are you trying to do? what is the end goal? the big picture?

i am pretty sure i dont understand and more details will let everyone understand and thus  increase the ability to assist.

Hello Josh,

Firstly, thank you for your help.

The goal is to keep no siteminder cookie in the browser if it is not closed after disconnection.

Best regards.

the goal is not realistic. there is no 100% way to do  this. the best you can get is the logout page pushing to another server without SM that undoes the cookie via code, but not everyone will stay long enough to hit the page.

what about those whom close browsers mid session?

the stated goal is not attainable.

please request those requesting this of you explain their goal.

what they truely want may be possible, but what they are asking for is not.

Hi @Ludovic

You can achieve this by writing following simple java script in your logoff page (logoffuri):

******************************************************

var delete_cookie = function(name) {

    document.cookie = name + '=;expires=Thu, 01 Jan 1970 00:00:01 GMT;';

};

******************************************************

Then to delete a SMSESSION cookie just make a call to the above function on windows load as below :

window.onload = function() {

delete_cookie('SMSESSION');

};

Hope this helps.

Cheers,

Ujwol Shrestha

Ujwol,

While that code  will do the trick and is what i had in mind, this is a situation where the reason for the request MUST be  understood, because the stated goal is not realisitic and until  one understands thte reason for the stated goal one cannot address the actual issue.

-Josh