Logout with new shibboleth sp

[Justin Russo]

Hi Scott,
Thanks for explaining so clearly. Now i know the only way for to achieve this only through local logout.
I did try this a while back and i used the below syntax in my shibboleth2.xml, but its stopping my shib service. i think i have a syntax error -

<Logout>SAML2 Local 
return="https://mysite.com/mysite/" 
</Logout>



________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, July 5, 2013 1:40 PM
Subject: Re: Logout with new shibboleth sp
 

On 7/5/13 1:34 PM, "Justin Russo" <justin9 at ymail.com> wrote:

>Hi Peter thank you soo much.
>I did verify the metadata file provided by my IDP and there is no
>SingleLogoutService defined.
>all they gave me is the
>https://myidp.org/siteminderagent/smlogout.asp?AppReturnUrl=https://mysite
>.com/mysite/ to
> logout
>so can i still achieve the logout from my end (sp).

That's not a SAML logout. If there's no logout support in the IdP, then
you're using Local logout.

Quoting the entire one sentence in the wiki that explains how that works:

Local LogoutInitiator

Indicated by type="Local", performs a local logout without attempting to
involve the IdP, and removes the active session from the cache. Upon
completion, the browser will be redirected to the location in the "return"
parameter, if any, or the localLogout template will be displayed.

If that's not clear, help by explaining what's not clear so it can be
improved.


-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130705/cab817a5/attachment-0001.html