Merge pull request #5582 from govuk-one-login/ATO-1134/turn-on-destro…

…y-orch-session-on-prod ATO-1134: turn on destroy orch session on logout in prod
govuk-one-login · Jan 15, 2025 · 027d680 · 027d680
2 parents 40f9c8f + 05000c9
commit 027d680
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/ci/terraform/oidc/production.tfvars b/ci/terraform/oidc/production.tfvars
@@ -55,4 +55,4 @@ orch_authentication_callback_enabled        = true
 orch_logout_enabled                         = true
 auth_spot_response_disabled                 = true
 orch_storage_token_jwk_enabled              = true
-is_destroy_orch_session_on_sign_out_enabled = false
+is_destroy_orch_session_on_sign_out_enabled = true
diff --git a/template.yaml b/template.yaml
@@ -72,6 +72,7 @@ Conditions:
       !Equals [build, !Ref Environment],
       !Equals [staging, !Ref Environment],
       !Equals [integration, !Ref Environment],
+      !Equals [production, !Ref Environment],
     ]
   IsReturnAuthTimeInIdTokenEnabled:
     !Or [