Asynchronous Logout with ADFS

[bmontgomery]

We have the Shib SP running on IIS, and we're trying to integrate the logout
functionality with ADFS. I've seen plenty of things out there (including
Shibboleth SP docs) which say that ADFS does not like the extensions (which
define asynchronous logout) that are put into the XML of the logout request,
and it throws an error when the user is redirected to ADFS from Shib. I'm of
the opinion that this is a Microsoft bug, but MS seems to think otherwise. 

>From what I'm reading, I can just put asynchronous="false" on the
LogoutInitiator element to work around this problem. I'm wondering if that
is the right thing to do. What effect does this have on Shib IdP's (and
other IdP's) which integrate with us?




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Asynchronous-Logout-with-ADFS-tp7585790.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.