SLO

[Cantor, Scott]

> The /Status page shows that I have NameID set to the users login name -

I think you mean /Session, but no, it doesn't. It won't show anything about the NameID, it doesn't know what the assertion's subject contained. The problem is as it said, the IdP is not supplying a NameID in the assertion.

> does the message mean that I have to have NameID & entityID set as I read
> it that either will do?

Both, not neither. But the entityID isn't the problem, that's more of a sanity check. The problem is the NameID isn't supplied.

If that's not fixable, then you'd have to do with the proprietary option, SAML logout requires a NameID.

-- Scott