title: Session Management OpenID Connect Why two Iframes?
body: <p>I have been reading the OpenID Connect draft specification describing how to handle a user log off. Everything points to this super weird, two iframe solution. See here:
  <a href="http://openid.net/specs/openid-connect-session-1_0.html#CreatingUpdatingSessions" rel="noreferrer">openid spec for sessions</a>
  and a brief description here:
  <a href="https://hanszandbelt.wordpress.com/2015/01/19/openid-connect-session-management/" rel="noreferrer">Hans Zandbelt blog regarding this strategy</a></p>
  
  <p>can someone explain why I need two separate iframes, and not just one to the openid identity provider, and some javascript on my page to delete the cookie and redirect to the sso login?</p>