Shibboleth.sso/Logout questions

[Andrew Webb]

I haven't been able to see the "partial logout" report yet, as I can't
currently test against an IdP that doesn't support SLO.  But I know that I
will have such IdPs, as well IdPs that do support SLO.  Hence my question.

Let me try and nail this down...  with <Logout>SAML2 Local</Logout> in my
shibboleth2.xml file, when I redirect to
<myWebsite>/Shibboleth.sso/Logout?return=<returnAddr>  :-

1) If the IdP supports SLO then (all being well) it will first logout on the
IdP, then logout the local Shib session, and then return to my addr.

2) If the IdP doesn't support SLO then it will logout the local Shib
session, but then report a partial logout and /not/ return to my addr? 
(although I note that you sat that I can redirect instead of showing the
partial logout report).

Is this all correct?  Or, where have I gone wrong?



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-sso-Logout-questions-tp7581002p7581005.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.