IDP SLO endpoint confusion

[Cantor, Scott]

> The LocalLogout handler defined in the handler.xml that shipped with 2.4.0
> seems to have a requestPath value of /Logout, not /LocalLogout. Are we
> talking about the same thing here? Just making sure.

Yeah, I will check. My documentation may be wrong if I used /Logout.

> I was also suspecting that the SP wasn't using the ASLO extension. The log
> doesn't seem to indicate one way or the other, though, which leads me to
> believe further that it isn't.

Turn on protocol debugging on one end or the other so you can tell.

> It's clearly triggering the first part, but not the second part that's associated
> with ASLO, or I wouldn't be redirected back to the SP.

I don't know why it wouldn't be doing that.

> Anything else I can check on the SP to ensure that ASLO is being used?

Just tracing the message to verify it. You could just use SAML Tracer in FF too.

-- Scott