Despite the caveats, I'm keenly interested in this proposed new feature: https://wiki.shibboleth.net/confluence/display/SHIB2/IdPEnableSLO InCommon wants to support this in metadata but I'm not exactly sure what's required. If we supported <md:SingleLogoutService> endpoints at both the IdP and SP for front channel bindings only, would that be sufficient? Thanks, Tom