[JIRA] Commented: (SIDP-563) IdP-only SAML logout profile handler

[Scott Cantor (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SIDP-563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14574#comment-14574 ] 

Scott Cantor commented on SIDP-563:
-----------------------------------

http://svn.shibboleth.net/view/java-shib-idp2?rev=3124&view=rev

This includes:

- adding a utility function to abstract profile bases to derive a session index key based on a NameID
- modifying the SSO profiles to back-index Sessions by the derived key for later use
- schema, config changes, Spring config, and a profile handler for implementing a limited logout feature
- an example JSP template for UI purposes

I also added the name identifier data to the ServiceInformation API and impl to support the existing Hungarian SLO extension. They use that so they can propagate the logout to other SPs, and I wanted to make sure they could do that as an extension without modifying the IdP itself. It's String data, so doesn't break the serializability of the ServiceInformationImpl objects for Terracotta purposes.

Leaving open pending more testing and a documentation writeup.

> IdP-only SAML logout profile handler
> ------------------------------------
>
>                 Key: SIDP-563
>                 URL: https://issues.shibboleth.net/jira/browse/SIDP-563
>             Project: Shibboleth IdP 2 - Java
>          Issue Type: New Feature
>          Components: SAML 2
>            Reporter: Scott Cantor
>            Assignee: Scott Cantor
>             Fix For: 2.4.0
>
>   Original Estimate: 2 days, 4 hours
>  Remaining Estimate: 2 days, 4 hours
>
> Original plan was to do an extension for 2.3 that did some kind of logout targeted at the IdP only, with no propagation.
> With 2.4 on the table, we can incorporate this into the next release instead.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira