[JIRA] Created: (SSPCPP-429) Logout currently limited to single application boundary

[Scott Cantor (JIRA)]

Logout currently limited to single application boundary
-------------------------------------------------------

                 Key: SSPCPP-429
                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-429
             Project: Shibboleth SP - C++
          Issue Type: Improvement
          Components: SAML 2.0 Logout
    Affects Versions: 2.4.3, 2.4.2, 2.4.1, 2.4
            Reporter: Scott Cantor
            Assignee: Scott Cantor


When a logout request comes into an endpoint, the application associated with the endpoint is passed into the logic that locates the sessions to end. That prevents matching sessions that live in other applications from being retrieved. That works as long as the other application has a separate entityID, since the IdP would be expected to send a second request, but not otherwise.

If it did get fixed, we'd then have to have a way to detect which SP "identity" the logout request was sent to and skip sessions associated with a different identity.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira