We are looking to leverage ADFS 3.0 with our new HRIS system (Workday). we have several shared auto-logon workstations that are used by our staff. We are testing a scenario where we put ADFS for our shared device in a GPO that sets our ADFS site as trusted site so their AD creds are not automatically passed and they are prompted to sign-in. upon signing out, I would like to ensure that if they don’t close the browser that the session cookie is removed. forcing authentication again should they go to the workday site.
does anyone have any good ways to accomplish this?
we have configured our logout endpoint as https://adfs.domain.com/adfs/ls/?wa=wsignout1.0
we get a notice that you have been signed out but if i don't close the browser, and go to the url for workday .. I am signed in as the previous users.
Thanks.
