Logout with new shibboleth sp

[Peter Schober]

* Justin Russo <justin9 at ymail.com> [2013-07-05 19:45]:
> Thanks for explaining so clearly. Now i know the only way for to
> achieve this only through local logout.

I'd rather pester the IdP to provide you with SAML2 Logout endpoints,
so you can at least try how this works in your environment.

> I did try this a while back and i used the below syntax in my
> shibboleth2.xml, but its stopping my shib service. i think i have a
> syntax error -
> 
> <Logout>SAML2 Local 
> return="https://mysite.com/mysite/" 
> </Logout>

That's not even valid XML.
Either way I don't see documentation that says you can add the return
parameter to the shibboleth2.xml, so you can't just make up your own
configuration and expect the software to work with it.

I already pointed you to the documentation at
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator
which has this text:

 "Finally, you can supply a parameter named "return" as a query string
  parameter containing a URL. If logout completes successfully, the SP
  will redirect the browser to that location."

My other email has a full example on how to construct such a link to
integrate with your application,
-peter