Single sign-on improvements in Fedora 24 - Fedora Magazine

[Josh]

A quote from 
https://fedoramagazine.org/single-sign-on-improvements-fedora-24/ :

"Fedora 24 includes both FreeIPA and Ipsilon to make it possible to 
configure your own Google Apps for Domain instance to authenticate 
against your own FreeIPA domain. Follow 
https://ipsilonproject.org/doc/example/google-apps.html for more details."

I wonder if article author is on this list and can explain how to add 
properly functioning google logout.

Regards,
Josh.

[Simo Sorce]

On Wed, 2016-08-03 at 21:48 -0400, Josh wrote:
> A quote from 
> https://fedoramagazine.org/single-sign-on-improvements-fedora-24/ :
>
> "Fedora 24 includes both FreeIPA and Ipsilon to make it possible to 
> configure your own Google Apps for Domain instance to authenticate 
> against your own FreeIPA domain. Follow 
> https://ipsilonproject.org/doc/example/google-apps.html for more details."
>
> I wonder if article author is on this list and can explain how to add 
> properly functioning google logout.

Hi Josh,
I find only contradictory info on Single Logout support by Google Apps,
many claim it is simply not supported.

Some resources report you should set a Single Logout URL of:
 https://mail.google.com/a/out/tld/?logout where I believe "tld" is your
Google Apps domain name.
Yet others report this will only cause an infinite loop at logout.

Maybe try this out and let us know.

Simo.