Idp initiated SLO with multiple session indexes

[Amit Thukral]

Hi,

There is a scenario that one of our customers has
Hostname HI with multiple applications A,B,C
Hostname H2 - D,E,F

We are a SP and customer is an Idp.
Everything works fine, SSO, SLO except one case of Idp Initiated SLO where:
- user login to Idp
- Access application H1 -A , H2 - D (Session gets created in SP as well)
- Now he does SLO from Idp

SP receives a SLO  request on hostname H1 with both session indexes of A&D.
SP does logout for H1-A (Sends Logout Response properly with success ) but
there is following error about B in shibd.log
*logout find: an application (svc4_p3) tried to access another
application's session*

I believe the SP should have sent two SLO requests, one for each host but
the customer says that it's a valid SLO request and SP should logout both
the sessions.

Can someone please let me know the right behaviour ?

Thanks!!!
Amit
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20171115/39bdb332/attachment.html>