trouble with iis 7.5 windows sever 2008 r2

[Christopher Bongaarts]

On 6/2/2013 1:39 PM, Cantor, Scott wrote:
>> How does one logout?
> In practice you don't. Logout in a federated SSO environment is
> essentially undeployable and will become more so as third party cookies
> become less accepted. The wiki discusses this at length, and the
> Shibboleth IdP does not support SAML logout.
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/SLOIssues
>
>> >I could delete the_shibsession_* cookie and redirect to my home page I
>> >guess.
>> >Is there a standard way to do that?
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator
>
>
> Yes, /Shibboleth.sso/Logout?return=

Since the OP mentioned that his planned setup was bilateral:

If you have a single IdP that you're using, and that IdP offers some 
means for logout (the newest IdP has such a mechanism that is similar to 
SAML logout - see wiki topic IdPEnableSLO), you can "chain" logouts 
together via the "return" parameter to get the behavior you expect (or 
at least as close as you can get).

e.g. 
https://sp.example.org/Shibboleth.sso/Logout?return=https%3a%2f%2fidp.example.org%2fidp%2fprofile%2fLocalLogout

which will first log the user out of your SP, then send them to the IdP 
to get logged out there.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%