Regarding Single Logout

[Naveen Davis]

Hi,

I am new to shibboleth and I have been trying to implement single logout
in shibboleth. I have installed & configured the Hungarian SLO
Shibboleth Idp (version 2.2.0) on my Ubuntu(version 10.04) machine. The
Shibboleth SP ( version 2.4.3) is running on CentOS(version 5.5) in
Vmware. The shibboleth SSO is working fine.But the single logout is not
working at all and IdP still have an active SSO session after logging
out. It just displays an error message stating missing endpoint security
requirements. I have checked the shibd.log file, but no specific error
message. I have configured the single logout endpoints in Idp metatdata
as follows


<SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
                       
location="https://idp1.example.org/idp/profile/SAML2/Redirect/SLO" 
                            
ResponseLocation="https://idp1.example.org/idp/profile/SAML2/Redirect/SLO"/>
 
<SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" 
                          
Location="https://idp1.example.org/idp/profile/SAML2/POST/SLO" 
                            
ResponseLocation="https://idp1.example.org/idp/profile/SAML2/POST/SLO"/>
       
<SingleLogoutService 

Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP"

Location="https://idp1.example.org:8443/idp/profile/SAML2/SOAP/SLO" />


I would like to know am I missing any key configurations in Idp and SP
for enabling single logout. Also is there any good reference on Single
logout/Hungarian SLO configurations apart from the wiki page.

BR,
Naveen