Problem in Logout request for Post binding

rahul sharma rahulsharma.bbiet at gmail.com
Thu Jan 16 10:01:44 EST 2020


Hi Brent,
             Thanks for your reply. I am completely new to this SAML thing.
Let me explain my situation.

1. user opens my application, home page is displayed.
2. Click on login button, then user is redirected to the IDP login page.
3. Now user enter his credentials to login, then IDP send SAML response to
the assertion consumer provided in SP metadata.xml.
4. my Assertion consumer servlet parses the response and validates its
signature and allows the user to access the application.
5. Now user is done with his work and logout from my application then I
clear all the session for my application and user is redirected to the first
page with login button.
6. Now user clicks the login button again and is redirected to the idp login
but this time IDP session is already thereso IDP sends the SAML response,
and user is again inside my app.

Now I want to logout the user completely so I need to send a SLO request to
the IDP, to clear the IDP session.

Bindings in IDP Metadata are - 

<md:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://dev.jp.hondaweb.com/sps/hondasaml20fed/saml20/sloinitial?RequestBinding=HTTPPost"/>
<md:SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://dev.jp.hondaweb.com/sps/hondasaml20fed/saml20/login"/>
<md:SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
Location="https://dev.jp.hondaweb.com/sps/hondasaml20fed/saml20/login"/>


So I have to use the post binding to send the SLO request. I found some
examples to prepare the SLO request on 
https://www.programcreek.com/java-api-examples/?api=org.opensaml.saml2.core.LogoutRequest
<https://www.programcreek.com/java-api-examples/?api=org.opensaml.saml2.core.LogoutRequest>  

But how to send the prepared logout request to the IDP?
I have posted my current code in last email but It does not send any request
anywhere. If I am on right track then please tell me what I am missing or
what to do next to send the SLO req to IDP.


Thanks,
Rahul




--
Sent from: https://shibboleth.1660669.n2.nabble.com/Shibboleth-Developers-f1660781.html


More information about the dev mailing list