Description
Integrated applications detect that a Crowd session has been invalidated when they send a validation request to Crowd. If session.validationinterval is set then sessions will only be validated after a certain delay has passed. This creates a window where an application will allow use of a session that has been logged out elsewhere.
Setting the interval to zero means logged out sessions will be detected immediately, at the cost of a large number of extra requests to Crowd, which will hurt performance.
If Crowd published a log-out event to all applications then the window would be closed without requiring applications to check each time.