3.1.1.5.2 Relying Party Web Browser Requestor Sessions List

  • Article

The following is a potential representation for a relying party to organize the data for tracking web browser requestor sessions to support processing of wsignout1.0 and wsignoutcleanup1.0 messages. The data is organized as a list of records, each representing a particular web browser requestor session.

The following is a potential representation for organizing the data record that represents a particular web browser requestor session on the list.

Inbound Sessions List: This data element marks the beginning of the list of web browser requestor sessions.

WebBrowserRequestorSession: This record holds the list of security tokens received for a particular web browser requestor session. The fields of this record are as follows:<45>

  • Requestor Session Identifier: This uniquely identifies a particular web browser requestor session. A WebBrowserRequestorSession record is added to the Inbound Sessions List when the first security token is received for a particular web browser requestor session.

  • Session Entry: This identifies a requestor IP/STS based on the Issuer attribute value from a security token. A Session Entry is added to the record when a security token is received for the web browser requestor session.