make SP to not validate logout responses

[Cantor, Scott]

On 10/16/12 3:53 AM, "ignasr at vault13.lt" <ignasr at vault13.lt> wrote:
>
>is it possible to make Shibboleth 2.5.0 SP not require logout responses
>to be signed?

Not easily. You'd have to create a dedicated security policy rule set in
security-policy.xml, assign it a policyID there, and turn off the
signature rule.

Then you'd have to add an attribute to the <Logout> element:

conf:policyId

And link that up.

And then you'd have to hope it works, that's pretty untested stuff.

-- Scott