@Override                                                                                             
public void onLogout(PrincipalCollection principals) {                                                
    super.onLogout(principals);                                                                       
    Collection<Object> list = SecurityUtils.getSubject().getSession(false).getAttributeKeys();                                                                                     
    for (Iterator<Object> it = list.iterator(); it.hasNext();) {                                      
        Object key = it.next();                                                                       
        if (key instanceof String) {                                                                  
            String skey = (String) key;                                                               
            if (skey.contains("UISession")) {                                                         
                Object callback = SecurityUtils.getSubject().getSession(false).getAttribute(key);     
                if (callback instanceof HttpSessionBindingListener) {                                 
                    HttpSessionBindingListener listener = (HttpSessionBindingListener) callback;      
                    listener.valueUnbound(null);                                                      
                }                                                                                     
            }                                                                                         
        }                                                                                             
    }                                                                                                 
}