Logout with new shibboleth sp

[Cantor, Scott]

On 7/5/13 1:34 PM, "Justin Russo" <justin9 at ymail.com> wrote:

>Hi Peter thank you soo much.
>I did verify the metadata file provided by my IDP and there is no
>SingleLogoutService defined.
>all they gave me is the
>https://myidp.org/siteminderagent/smlogout.asp?AppReturnUrl=https://mysite
>.com/mysite/ to
> logout
>so can i still achieve the logout from my end (sp).

That's not a SAML logout. If there's no logout support in the IdP, then
you're using Local logout.

Quoting the entire one sentence in the wiki that explains how that works:

Local LogoutInitiator

Indicated by type="Local", performs a local logout without attempting to
involve the IdP, and removes the active session from the cache. Upon
completion, the browser will be redirected to the location in the "return"
parameter, if any, or the localLogout template will be displayed.

If that's not clear, help by explaining what's not clear so it can be
improved.


-- Scott