<div dir="ltr">Hi Scott,<div><br></div><div>Thanks for the previous response. </div><div>I could find the previous issue and could fix it.</div><div>Now the LogoutReuest received at SP-2 is fine and is being processed but still its not getting through.</div><div>I am getting RequestDenied but unable to understand the reason for the same. Transaction logs say that the session was distroyed. Following are the request and response msgs:</div><div><br></div><div><i><samlp:LogoutRequest ID="_cc692418-9396-4ba1-ae96-8c9411258463" Version="2.0" IssueInstant="2014-12-22T17:37:59.970Z" Destination="<a href="https://waf6sp1app1.com/Saml.sso/SLO/Redirect">https://waf6sp1app1.com/Saml.sso/SLO/Redirect</a>" NotOnOrAfter="2014-12-22T18:37:59.970Z" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://sts.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/">https://sts.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/</a></Issuer><NameID xmlns="urn:oasis:names:tc:SAML:2.0:assertion">3mZ23mGKvN_5-f8hG1k5r6nFNhdZvRmh5QjWGjQZDdE</NameID><samlp:SessionIndex>_c63793b5-8d60-4306-b56e-70c6669aebff</samlp:SessionIndex></samlp:LogoutRequest><br></i></div><div><i><br></i></div><div><i><samlp:LogoutResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" Destination="<a href="https://login.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/saml2">https://login.windows.net/3713ed32-ab1a-4a87-ab86-afdf9177ff06/saml2</a>" ID="_91fb9446cda1b937fa8c34208b001457" InResponseTo="_cc692418-9396-4ba1-ae96-8c9411258463" IssueInstant="2014-12-22T17:38:14Z" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a href="https://waf6sp1app1.com/samlsso">https://waf6sp1app1.com/samlsso</a></saml:Issuer><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Requester"><samlp:StatusCode Value="urn:oasis:names:tc:<b>SAML:2.0:status:RequestDenied</b>"/></samlp:StatusCode><samlp:StatusMessage><b>Error processing request</b>.</samlp:StatusMessage></samlp:Status></samlp:LogoutResponse><br></i></div><div><i><br></i></div><div><i>2014-12-22 09:38:14 INFO <b>Shibboleth-TRANSACTION</b> [1]: Destroyed session (applicationId: svc_3_pol1) (ID: _9c7176ee797f5ce3308406f1c0f7b7d1)<br></i></div><div><i><br></i></div><div>Thanks in advance for the help.</div><div>Regards,</div><div>Amit Thukral</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Dec 18, 2014 at 10:30 PM, <span dir="ltr"><<a href="mailto:dev-request@shibboleth.net" target="_blank">dev-request@shibboleth.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send dev mailing list submissions to<br>
<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="http://shibboleth.net/mailman/listinfo/dev" target="_blank">http://shibboleth.net/mailman/listinfo/dev</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:dev-request@shibboleth.net">dev-request@shibboleth.net</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:dev-owner@shibboleth.net">dev-owner@shibboleth.net</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of dev digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: Facing issue with Single Logout. (Cantor, Scott)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Thu, 18 Dec 2014 16:26:31 +0000<br>
From: "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>><br>
Subject: Re: Facing issue with Single Logout.<br>
To: Shib Dev <<a href="mailto:dev@shibboleth.net">dev@shibboleth.net</a>><br>
Message-ID: <<a href="mailto:59715D3C-80BE-4053-8B15-0C23D4919D50@osu.edu">59715D3C-80BE-4053-8B15-0C23D4919D50@osu.edu</a>><br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
On 12/18/14, 4:17 PM, "Amit Thukral" <<a href="mailto:amit.thukral403@gmail.com">amit.thukral403@gmail.com</a>> wrote:<br>
><br>
>shibd.log<br>
><br>
>=========<br>
>2014-12-17 21:55:29 ERROR XMLTooling.ParserPool [9] handleError: fatal<br>
>error on line 1, column 1, message: An exception occurred!<br>
>Type:UTFDataFormatException, Message:invalid byte 1 () of a 1-byte<br>
>sequence.<br>
>2014-12-17 21:55:29 ERROR Shibboleth.Listener [9]: error processing<br>
>incoming message: XML error(s) during parsing, check log for specifics<br>
><br>
><br>
>Is it because that the Logout Request reaching at SP-2 contains the<br>
>entityID of SP-1 in issuer element which SP-2 has no knowledge of ?<br>
<br>
No, it means what it says, the XML is invalid. The message was not encoded<br>
correctly or was bad XML in the first place.<br>
<br>
-- Scott<br>
<br>
<br>
------------------------------<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
<br>
End of dev Digest, Vol 42, Issue 26<br>
***********************************<br>
</blockquote></div><br></div>