Logout with new shibboleth sp

Peter Schober peter.schober at univie.ac.at
Fri Jul 5 12:31:05 EDT 2013


* justin9 <justin9 at ymail.com> [2013-07-05 18:24]:
> i think i might know where im going wrong. the url provided by my idp, i'm
> just using it in the button click event, which obviously is just
> redirecting. i think i have to make some changes to my shibboleth2.xml
> <logout> attribute.
> currently its 
> <Logout>SAML2 Local</Logout>
> 
> i tried to add
> 
> <Logout>SAML2 Local
> return="https://myidp.org/siteminderagent/smlogout.asp?AppReturnUrl=https://mysite.com/mysite/"
> </Logout>
> 
> the above syntax is not working.

If your SP has metadata for the IdP and that metadata includes a
support binding for SingleLogoutService the SP will generate SAML2
logout requests to the IdP automagically.
So are there any SingleLogoutService elements in the IDP's metadata?
-peter


More information about the users mailing list