Logout with new shibboleth sp

[Peter Schober]

* Justin Russo <justin9 at ymail.com> [2013-07-05 23:18]:
>Response.Redirect("https://myidp.org/siteminderagent/smlogout.asp?AppReturnUrl=https://testsite.mysite.com/Shibboleth.sso/Logout?return=https://testsite.mysite.com/app1");

My previously posted examples (which you seemingly did not read)
suggested the other way around (going to the SP logout first and then
to the IdP)...

* Peter Schober <peter.schober at univie.ac.at> [2013-07-05 19:47]:
> * Justin Russo <justin9 at ymail.com> [2013-07-05 19:35]:
> > all they gave me is the https://myidp.org/siteminderagent/smlogout.asp?AppReturnUrl=https://mysite.com/mysite/ to logout
[...]
> Failing that you could initiate logout from your application by
> placing a link to your logout handler /Shibboleth.sso/Logout with a
> 'return' query string that contains the above URL in urlencoded form.
> 
> Something like this:
> 
> /Shibboleth.sso/Logout?return=https%3A%2F%2Fmyidp.org%2Fsiteminderagent%2Fsmlogout.asp%3FAppReturnUrl%3Dhttps%3A%2F%2Fmysite.com%2Fmysite%2F

...but since local logout without involving the IdP is mostly
worthless (wihout extra work, such as setting forced reauthentication
on the next login, which only works with lazy sessions) the order of
local logout probably doesn't matter.

Now you're only left with all the problems described on the SLOIssues
page, mostly people chosing logout on any other SP than yours.
-peter