Ending an SSPI Session

After the client and server have finished communicating, both sides call the DeleteSecurityContext function with their respective context handles. The client must also call the FreeCredentialsHandle function when it has finished communicating with any server or has finished using the additional credentials passed to the AcquireCredentialsHandle function. The server must call DeleteSecurityContext when it is ready to shut down, but before unloading the DLL.