Asynchronous Logout with ADFS

[bmontgomery]

Thanks, Scott. I'll disable asynchronous logout.

On 4/2/2013 10:10 AM, Cantor, Scott E. [via Shibboleth] wrote:
> On 4/2/13 8:36 AM, "bmontgomery" <[hidden email]
> </user/SendEmail.jtp?type=node&node=7585791&i=0>> wrote:
>
>  >We have the Shib SP running on IIS, and we're trying to integrate the
>  >logout
>  >functionality with ADFS. I've seen plenty of things out there (including
>  >Shibboleth SP docs) which say that ADFS does not like the extensions
>  >(which
>  >define asynchronous logout) that are put into the XML of the logout
>  >request,
>  >and it throws an error when the user is redirected to ADFS from Shib. I'm
>  >of
>  >the opinion that this is a Microsoft bug, but MS seems to think
> otherwise.
>
> MS is wrong. Extensions in SAML are optional by definition. This is
> explicitly called out in the standard. This is not just opinion, as it's
> not an ambiguous area of the standard.
>
>  >
>  >
>  >>From what I'm reading, I can just put asynchronous="false" on the
>  >LogoutInitiator element to work around this problem. I'm wondering if
> that
>  >is the right thing to do. What effect does this have on Shib IdP's (and
>  >other IdP's) which integrate with us?
>
> The only software that will ever do anything with that extension is a
> Shibboleth IdP version that isn't out yet.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to [hidden email]
> </user/SendEmail.jtp?type=node&node=7585791&i=1>
>
>
> ------------------------------------------------------------------------
> If you reply to this email, your message will be added to the discussion
> below:
> http://shibboleth.1660669.n2.nabble.com/Asynchronous-Logout-with-ADFS-tp7585790p7585791.html
>
> To unsubscribe from Asynchronous Logout with ADFS, click here
> <http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=7585790&code=Ym1vbnRnb21lcnlAdGVhbWR5bmFtaXguY29tfDc1ODU3OTB8LTY5MTg2ODMxOQ==>.
> NAML
> <http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
>





--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Asynchronous-Logout-with-ADFS-tp7585790p7585792.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130402/b79a54b6/attachment.html