Idp Initiated SLO with Hungarian Shib 2.2.1 and Logical SPs

raghavendra harapanahalli raghubiotech at gmail.com
Thu Oct 20 17:32:45 BST 2011


I meant i am using userId as the NameID in <LogoutRequest> to indicate the
user to be logged out.

Could you guide me how to configure the IDP to make sessions index to be
included in the Logout request.



>There's no reason to use such a NameID with a Shibboleth scenario, so
>apart from filing the bug, I'd probably change that as a way around the
>problem.

On Thu, Oct 20, 2011 at 7:41 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 10/20/11 7:27 AM, "raghavendra harapanahalli" <raghubiotech at gmail.com>
> wrote:
>
> >Kindly suggest if this is a bug or some other issue or incompatibility
> >between the Hungarian SLO and Shibboleth SP.
>
> Probably a bug, but...
>
> >Note: I am using my User ID <USER> as the NameID.Not sure if this is the
> >cause of the problem.
>
> That probably is the source of the bug, since it's going to find every
> session keyed by that NameID if the SessionIndex isn't specified.
>
> I'd have to spend a lot more time looking into it, and I don't have any
> actual implementations to test against, so it's a hit or miss feature.
>
> There's no reason to use such a NameID with a Shibboleth scenario, so
> apart from filing the bug, I'd probably change that as a way around the
> problem.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111020/d7ab95b5/attachment.html 


More information about the users mailing list