<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>
<div>This question is mostly for the team from NIIF, but also touches on some general SLO questions.</div>
<div><br>
</div>
<div>I've been working this past week on actually pulling out your SLO code and packaging it in a separate jar for inclusion with the main Shib release. That's actually working out pretty well. I've only found 3 core Shib classes that actually need modifications
to support the SLO work. I haven't got to the point yet to see if there is an alternate to that.</div>
<div><br>
</div>
<div>Anyway, one of the initial reasons I went down this path was due to a customer submitted but (to me) that the SLO request would not get redirected back to the initiating relying party. So what I see is that the sloController.jsp file actually implements
most of the logout logic. It also does not provide for the user's browser session to be redirected back to the initiating relying party site (with the appropriate LogoutResponse message).</div>
<div><br>
</div>
<div>So, two specific questions:</div>
<div><br>
</div>
<div>1. Why did you choose to encapsulate the SLO logic in the jsp page as opposed to the handler or servlet?</div>
<div>2. Why is their no redirect to the initiating relying party at the end?</div>
<div><br>
</div>
<div>From reading the SAML spec document, it says to me that their should be a final response to the initiating relying party. Figure 3 on page 33 of the SAML Profiles pretty much says that.</div>
<div><br>
</div>
<div>thanks,</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>
<div>-- </div>
<div><br>
</div>
</div>
<div>
<div>Paul Hethmon</div>
<div>Chief Software Architect</div>
<div>Clareity Security, LLC</div>
<div>o) 865.824.1350</div>
<div>c) 865.250.3517</div>
<div>e) paul.hethmon@clareitysecurity.com</div>
</div>
<div><br>
</div>
</div>
</div>
</div>
</body>
</html>