Regarding Single Logout

[Kristof Bajnok]

On 2011. August 11. 10:41:56 Naveen Davis wrote:
> I am trying to test out a use case scenario where the user is provided
> with an option for local logout and single/global logout. But as if now
> even the local logout handler "/Shibboleth.sso/Logout" is also getting
> redirected to the Idp logout. 

By default, ShibSP "/Logout" LogoutInitiator initiates SLO if the IdP supports 
it, according to the metadata. 

> I am wondering what should be done so that
> the local logout doesn't invalidates the Idp session 

Just comment out the "SAML2" LogoutInitiator from the one called "/Logout" or 
define a new one with type="Local" and a different location.

See: 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator

> and displays the local/partial logout template.

I'm not sure if it's possible. You have to use the return parameter and create 
a landing page, I guess.

Kristof