Is Single Logout (SLO) enabled with the IAM Service? For example Single Log Out doesn't completely work -- users are asked to close their browser entirely. For PowerTeacher, PowerSchool, SchoolNet, it is VERY important to keep the data SAFE (since it is student data including grades, etc).
The current Home Base SSO process does not include SLO either, not an excuse, just a fact. To a large extent this is an artifact of the underlying SAML protocol that enables the SSO functionality. We have talked about the balance between security and incomplete log outs. The IAM Service presents a message to the users reminding them to completely close their browser when logging out:
