Question related to "Local Logout" provided by Shibboleth IdP 2.4.0

[Yaowen Tu]

Another think I want to confirm is that in current IdP there is no way to
do both of:
1) Local Logout which IdP locates an active session based on the client's
cookie and terminates it.
2) Redirect back to SP.

Is that right? If IdP do #2, it has to be a simplified version of single
logout. If #1, IdP will go to logout.jsp.

Thanks,
Yaowen

Yaowen


On Thu, Aug 29, 2013 at 11:54 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 8/29/13 1:54 PM, "Yaowen Tu" <yaowen.tu at gmail.com> wrote:
> >
> >How can I read parameters? Can I pass in some kind of parameters when
> >talking to IdP and eventually IdP will propagate the parameters to
> >logout.jsp page?
>
> If you mean can you pass parameters *from the SP*, no, not unless you use
> the proprietary endpoint that just exposes a URL as a redirect location.
> That can take anything you want, it's not a standardized flow. If you pass
> it "foo" and you implement your JSP logic to read foo from the servlet
> request, you can do anything you want.
>
> The SAML endpoint processing a real LogoutRequest is just SAML binding, so
> there's nothing you can do there.
>
> -- Scott
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130829/df124248/attachment.html