Custom SLO - NameId problem in a IDP initiated LogoutRequest

[Cantor, Scott]

Notwithstanding, again, that this is a simply horrible idea that is absolutely not something anybody should even consider doing, ever...

> NameQualifier should be the entityid of the idp or the sp? And about the value
> of NameID?

The NameID has to be exactly what was issued, there is no apriori answer to those questions.

> The value of the NameID it's something I can find in some object from:
> Multimap<String, SPSession> multimap = logoutContext.getSessionMap();

The implementation of the SAML2SPSession subinterface contains an accessor for the NameID. See the javadocs.

-- Scott