Idp Initiated SLO with Hungarian Shib 2.2.1 and Logical SPs

Cantor, Scott cantor.2 at osu.edu
Thu Oct 20 15:11:51 BST 2011


On 10/20/11 7:27 AM, "raghavendra harapanahalli" <raghubiotech at gmail.com>
wrote:

>Kindly suggest if this is a bug or some other issue or incompatibility
>between the Hungarian SLO and Shibboleth SP.

Probably a bug, but...

>Note: I am using my User ID <USER> as the NameID.Not sure if this is the
>cause of the problem.

That probably is the source of the bug, since it's going to find every
session keyed by that NameID if the SessionIndex isn't specified.

I'd have to spend a lot more time looking into it, and I don't have any
actual implementations to test against, so it's a hit or miss feature.

There's no reason to use such a NameID with a Shibboleth scenario, so
apart from filing the bug, I'd probably change that as a way around the
problem.

-- Scott



More information about the users mailing list