SAML Logout rejected by ADFS

Cantor, Scott cantor.2 at osu.edu
Sat Mar 9 11:43:42 EST 2013


On 3/9/13 2:44 AM, "andyp" <andy.phenix at gmail.com> wrote:

>The only item I'm curious about is whether ADFS supports the async profile
>extension - I can't find anything in the MS docs that indicate if it does
>or
>not.

They don't, but all extensions in SAML are optional and they would have a
bug if they cared.

>  In the interest of excluding that from the list of potential interop
>issues, is there a way to tell Shibboleth-SP to turn this extension off
>and
>/ or omit it from the logout request?

Yes. Sorry for not getting that into the documentation, it's just
asynchrnous="false" in the Logout or LogoutInitiator element.

Will add now.

-- Scott




More information about the users mailing list