title: How to invalidate siteminder session
body: <p>We are using Siteminder for authentication and we are using Angular js which is Stateless. </p>
  
  <p>How can I invalidate Siteminder Session. I have configured below in Spring Security. But it is not working for me.</p>
  
  <p>In HTML</p>
  
  <pre><code>   &lt;a href="../../logout"&gt;Sign Out&lt;/a&gt;&lt;/li&gt;
  </code></pre>
  
  <p>In Spring Security</p>
  
  <pre><code>  &lt;logout delete-cookies="JSESSIONID,SMSESSION" invalidate-session="true"  logout-url="/logout" logout-success-url="/Logout.html" /&gt;
  </code></pre>
  
  <p>In Logout.html we are providing a link to go to login page again. On clicking this, it should go to siteminder login page. But it is loading our welcome page instead.</p>
  
  <p>We are thinking of invalidating SMSESSION so that the app will redirect to siteminder on clicking "Go To Login Page". Can some one assist me on this.</p>
  
  <p><strong>Update1</strong>
  I tried setting SMSESSION=LOGGEDOFF in bot request and response objects of rest controller. But It is not working as there is no session maintained for angular and setting them in request/response just didnt help me</p>